fbdb166638e51d533419f7c006b28ddc4407a7f497a6a5fb3b0211d56e50254d | Triage

Sharing

General

Target

5fa20e5f2ce61f52d037066a4cfeeda0N.exe
Size

35KB
Sample

240824-qdyp2stbnl
MD5

5fa20e5f2ce61f52d037066a4cfeeda0
SHA1

c3ddd23a07a2653e2731749baa70ccb91778757d
SHA256

fbdb166638e51d533419f7c006b28ddc4407a7f497a6a5fb3b0211d56e50254d
SHA512

7f0f0c420ebc2964e42331c4adeb02b69c26566c68d748d87b7725921c17d8fdf342c436a672fb91dcbd59809e57fd92cddb50c4b72a9bedd916c3e3f74291f8
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAcBHUIFvS:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gs

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  5fa20e5f2ce61f52d037066a4cfeeda0N.exe
- Size
  
  35KB
- MD5
  
  5fa20e5f2ce61f52d037066a4cfeeda0
- SHA1
  
  c3ddd23a07a2653e2731749baa70ccb91778757d
- SHA256
  
  fbdb166638e51d533419f7c006b28ddc4407a7f497a6a5fb3b0211d56e50254d
- SHA512
  
  7f0f0c420ebc2964e42331c4adeb02b69c26566c68d748d87b7725921c17d8fdf342c436a672fb91dcbd59809e57fd92cddb50c4b72a9bedd916c3e3f74291f8
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAcBHUIFvS:e6q10k0EFjed6rqJ+6vghzwYu7vih9Gs
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence