9b11f4fe393fbae5b32f126a4acc520f5fb097c977fbd989a2c36b7fb9f6bb26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b11f4fe393fbae5b32f126a4acc520f5fb097c977fbd989a2c36b7fb9f6bb26
Size

52KB
Sample

240823-3zdcfswerm
MD5

ad3a8cdf3a1fa0e009ced18096d4d1cc
SHA1

c37f99a4f208fb7b0f32581df8ea1a04326cdc3a
SHA256

9b11f4fe393fbae5b32f126a4acc520f5fb097c977fbd989a2c36b7fb9f6bb26
SHA512

17ea477e9ded5e95676bf668c02ff1ea93f1f9693d9644ca67f6d29a841ac48412810636691e68e6a8ed599c17aefdc38a9967c038221f252fefafb64242a960
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhId:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVT

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9b11f4fe393fbae5b32f126a4acc520f5fb097c977fbd989a2c36b7fb9f6bb26
- Size
  
  52KB
- MD5
  
  ad3a8cdf3a1fa0e009ced18096d4d1cc
- SHA1
  
  c37f99a4f208fb7b0f32581df8ea1a04326cdc3a
- SHA256
  
  9b11f4fe393fbae5b32f126a4acc520f5fb097c977fbd989a2c36b7fb9f6bb26
- SHA512
  
  17ea477e9ded5e95676bf668c02ff1ea93f1f9693d9644ca67f6d29a841ac48412810636691e68e6a8ed599c17aefdc38a9967c038221f252fefafb64242a960
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhId:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVT
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence