3099f6073e2b68dd1c63b8c01978f0a8bec556cee1637460881c0ac3bd313e8b | Triage

Sharing

General

Target

ce80c74266c1729f185a9b9f756a2bc0N.exe
Size

48KB
Sample

240821-zjs67atcjr
MD5

ce80c74266c1729f185a9b9f756a2bc0
SHA1

eb55f074d549906c6c40f63ac9276b0085bf08fc
SHA256

3099f6073e2b68dd1c63b8c01978f0a8bec556cee1637460881c0ac3bd313e8b
SHA512

ebfaa143e62cd0c12c37222134eb9511f19c8af469293c4a72c1c12085912201c4d4eaf3e886cfb672100480535879b963c7ee9cda55da5f1faaac894db12740
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV+

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ce80c74266c1729f185a9b9f756a2bc0N.exe
- Size
  
  48KB
- MD5
  
  ce80c74266c1729f185a9b9f756a2bc0
- SHA1
  
  eb55f074d549906c6c40f63ac9276b0085bf08fc
- SHA256
  
  3099f6073e2b68dd1c63b8c01978f0a8bec556cee1637460881c0ac3bd313e8b
- SHA512
  
  ebfaa143e62cd0c12c37222134eb9511f19c8af469293c4a72c1c12085912201c4d4eaf3e886cfb672100480535879b963c7ee9cda55da5f1faaac894db12740
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV+
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence