aa32e7bb5a51454bb069ab400e7ad0a4701497546156d1af42ba454468da0819 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f17593179f37533c8a5e2f694ad70920N.exe
Size

37KB
Sample

240821-acxhlatfrr
MD5

f17593179f37533c8a5e2f694ad70920
SHA1

f80b54531e0b38466d00f6f99f81713fc20d57f2
SHA256

aa32e7bb5a51454bb069ab400e7ad0a4701497546156d1af42ba454468da0819
SHA512

84e3bc3adddc17bc4f8d8a4bfa338b511af01d6345448dab0193ea1414f32b301ee3177ca365c485a24a87d5bb58253614982bf454504db4a6aa624b64e81877
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IX:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gb

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  f17593179f37533c8a5e2f694ad70920N.exe
- Size
  
  37KB
- MD5
  
  f17593179f37533c8a5e2f694ad70920
- SHA1
  
  f80b54531e0b38466d00f6f99f81713fc20d57f2
- SHA256
  
  aa32e7bb5a51454bb069ab400e7ad0a4701497546156d1af42ba454468da0819
- SHA512
  
  84e3bc3adddc17bc4f8d8a4bfa338b511af01d6345448dab0193ea1414f32b301ee3177ca365c485a24a87d5bb58253614982bf454504db4a6aa624b64e81877
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IX:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gb
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence