f1bf556ef94603ea946bd27cb9c686e520dd50fe0c762f75cf08fe0595a1565d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f0c58b24c740de9681c9cb41e34ac9a0N.exe
Size

351KB
Sample

240823-cgqlyssbmk
MD5

f0c58b24c740de9681c9cb41e34ac9a0
SHA1

2aa05df9c2af523518fa6e047cc09720d24f4906
SHA256

f1bf556ef94603ea946bd27cb9c686e520dd50fe0c762f75cf08fe0595a1565d
SHA512

38f22a8910078e1392039dcf087f58117ee03d170edacbad2b47accffa1fe750a90c4a45fdc9d444ba78b5a462cd27054da87fe1dafdc0418ca88aab2be5a38c
SSDEEP

6144:Cs0N0GfEoS6ko+7bRD0I6qgG6z6QnkNblLIFifV9y7TJ1lJri8Ey:n0N0GfE0ko+xD0I6tGo659b9IJc8E

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  f0c58b24c740de9681c9cb41e34ac9a0N.exe
- Size
  
  351KB
- MD5
  
  f0c58b24c740de9681c9cb41e34ac9a0
- SHA1
  
  2aa05df9c2af523518fa6e047cc09720d24f4906
- SHA256
  
  f1bf556ef94603ea946bd27cb9c686e520dd50fe0c762f75cf08fe0595a1565d
- SHA512
  
  38f22a8910078e1392039dcf087f58117ee03d170edacbad2b47accffa1fe750a90c4a45fdc9d444ba78b5a462cd27054da87fe1dafdc0418ca88aab2be5a38c
- SSDEEP
  
  6144:Cs0N0GfEoS6ko+7bRD0I6qgG6z6QnkNblLIFifV9y7TJ1lJri8Ey:n0N0GfE0ko+xD0I6tGo659b9IJc8E
Score

7^/10

discovery persistence
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence