b62ea0c724cd07aeec74c6ab25bcfecfb99a202e1c479f7fc19c84cab0f73309 | Triage

Sharing

General

Target

96d32145cd4f614dfae4de9d53795e70N.exe
Size

223KB
Sample

240821-hrfsdsvekb
MD5

96d32145cd4f614dfae4de9d53795e70
SHA1

6d6ac35ca08374aaeae05d15bf5df18f55f5d1dd
SHA256

b62ea0c724cd07aeec74c6ab25bcfecfb99a202e1c479f7fc19c84cab0f73309
SHA512

588c2dcf1995d1384439939ca03777b615fa383e071450ca8229993599206b06fac916656836a4bf7aab70ac5c6e7410899b767d55bc5e5431a61badc13ec20e
SSDEEP

3072:/DSp4183Sf3/pF79wS6o+gUCebPmKmh6WPsbs9L1qu/Ptm3Jqyd/4XKI:C4/LuS+WcPmKmsEsY9RqSs3JqyiXKI

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  96d32145cd4f614dfae4de9d53795e70N.exe
- Size
  
  223KB
- MD5
  
  96d32145cd4f614dfae4de9d53795e70
- SHA1
  
  6d6ac35ca08374aaeae05d15bf5df18f55f5d1dd
- SHA256
  
  b62ea0c724cd07aeec74c6ab25bcfecfb99a202e1c479f7fc19c84cab0f73309
- SHA512
  
  588c2dcf1995d1384439939ca03777b615fa383e071450ca8229993599206b06fac916656836a4bf7aab70ac5c6e7410899b767d55bc5e5431a61badc13ec20e
- SSDEEP
  
  3072:/DSp4183Sf3/pF79wS6o+gUCebPmKmh6WPsbs9L1qu/Ptm3Jqyd/4XKI:C4/LuS+WcPmKmsEsY9RqSs3JqyiXKI
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation