6a2adf37171733bc65e369b17db18c0ae7e2220032421c7bf3c5d72316b94fe9 | Triage

Sharing

General

Target

4e6dc2fa38c29a57efba970606175700N.exe
Size

76KB
Sample

240824-z41rrs1hrl
MD5

4e6dc2fa38c29a57efba970606175700
SHA1

8c18725a98eb92de6805ecc5ce04908fd386bdb4
SHA256

6a2adf37171733bc65e369b17db18c0ae7e2220032421c7bf3c5d72316b94fe9
SHA512

475d07acd21be5e290f9913fb0a5723055f3c2f7abaf1de85c82f43363a0332fa9c2f97a55f2a2008e080fc716756ad5ea92ba20316af3b0127622ce2e9a316b
SSDEEP

1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN43vBKMvWPqH5kYhpvEHchVvhESN:xAo1lOwvlNlXBvsI7hrhEh9cpDN43vBl

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  4e6dc2fa38c29a57efba970606175700N.exe
- Size
  
  76KB
- MD5
  
  4e6dc2fa38c29a57efba970606175700
- SHA1
  
  8c18725a98eb92de6805ecc5ce04908fd386bdb4
- SHA256
  
  6a2adf37171733bc65e369b17db18c0ae7e2220032421c7bf3c5d72316b94fe9
- SHA512
  
  475d07acd21be5e290f9913fb0a5723055f3c2f7abaf1de85c82f43363a0332fa9c2f97a55f2a2008e080fc716756ad5ea92ba20316af3b0127622ce2e9a316b
- SSDEEP
  
  1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN43vBKMvWPqH5kYhpvEHchVvhESN:xAo1lOwvlNlXBvsI7hrhEh9cpDN43vBl
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence