47ceb6d4e8164dc77a16e4952cd062b6dda25f1428cf1876c2a8111295129591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47ceb6d4e8164dc77a16e4952cd062b6dda25f1428cf1876c2a8111295129591
Size

89KB
Sample

240823-zglpbsvfkd
MD5

15bde0f911993bb9cc2a89e5870d3548
SHA1

a6814eceaa78851fc087ee20b355b74b6ee3c842
SHA256

47ceb6d4e8164dc77a16e4952cd062b6dda25f1428cf1876c2a8111295129591
SHA512

de89a32519fef06bbe4241e82084f4e8154cf945a6d952ab4d1e533fa5b6ade2c93373c6a7aa67d89661e8cbe365fa6ab8d8fc8d48da400d7cd33ca2b3d32799
SSDEEP

768:Qvw9816vhKQLroc4/wQRNrfrunMxVFA3b7glL:YEGh0ocl2unMxVS3Hg9

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  47ceb6d4e8164dc77a16e4952cd062b6dda25f1428cf1876c2a8111295129591
- Size
  
  89KB
- MD5
  
  15bde0f911993bb9cc2a89e5870d3548
- SHA1
  
  a6814eceaa78851fc087ee20b355b74b6ee3c842
- SHA256
  
  47ceb6d4e8164dc77a16e4952cd062b6dda25f1428cf1876c2a8111295129591
- SHA512
  
  de89a32519fef06bbe4241e82084f4e8154cf945a6d952ab4d1e533fa5b6ade2c93373c6a7aa67d89661e8cbe365fa6ab8d8fc8d48da400d7cd33ca2b3d32799
- SSDEEP
  
  768:Qvw9816vhKQLroc4/wQRNrfrunMxVFA3b7glL:YEGh0ocl2unMxVS3Hg9
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence