b42f409312460e0e3105373826b5e2ca514fc11763de22a39f3a648c6a598958 | Triage

Sharing

General

Target

c4e5bdb7263ffd9d6c2209c6a5609170N.exe
Size

47KB
Sample

240821-jz8zks1hnl
MD5

c4e5bdb7263ffd9d6c2209c6a5609170
SHA1

29f6fbed4126a63e8b75200882cdb6ceaba97707
SHA256

b42f409312460e0e3105373826b5e2ca514fc11763de22a39f3a648c6a598958
SHA512

79da97d14bf54151478eec370eb73d027c0e410c55a3bb6bc892f66be91f90eb847aaa3e5ee4745b2e28add5d6c204a264dfdab8b6927c31e1702fd79e6935f3
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhN:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYt

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  c4e5bdb7263ffd9d6c2209c6a5609170N.exe
- Size
  
  47KB
- MD5
  
  c4e5bdb7263ffd9d6c2209c6a5609170
- SHA1
  
  29f6fbed4126a63e8b75200882cdb6ceaba97707
- SHA256
  
  b42f409312460e0e3105373826b5e2ca514fc11763de22a39f3a648c6a598958
- SHA512
  
  79da97d14bf54151478eec370eb73d027c0e410c55a3bb6bc892f66be91f90eb847aaa3e5ee4745b2e28add5d6c204a264dfdab8b6927c31e1702fd79e6935f3
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhN:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYt
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence