ca94f502026c5ac760c1a502cdc211a112581de334e8ad0363d0108499666b60 | Triage

Sharing

General

Target

eac85f06241ae46aa55469c12f521c10N
Size

430KB
Sample

240825-289ata1cjb
MD5

eac85f06241ae46aa55469c12f521c10
SHA1

3ca1a9ab3a572ebd9d2ab70c45ea40c45daf632d
SHA256

ca94f502026c5ac760c1a502cdc211a112581de334e8ad0363d0108499666b60
SHA512

a5c47d54d321553f1bc60678d5ff6558666b80fa9673c8ddc34609a96788fbf0371c75bf9adf669c25752378edf0ec65b75f7289cf3ab8807c7e64bfaf894407
SSDEEP

12288:ntKe6Zv23YeVOsiFKClC1NJhkbOOpPFrVQE61N4:76Zv2lZiFTqD2OOprQNN4

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  eac85f06241ae46aa55469c12f521c10N
- Size
  
  430KB
- MD5
  
  eac85f06241ae46aa55469c12f521c10
- SHA1
  
  3ca1a9ab3a572ebd9d2ab70c45ea40c45daf632d
- SHA256
  
  ca94f502026c5ac760c1a502cdc211a112581de334e8ad0363d0108499666b60
- SHA512
  
  a5c47d54d321553f1bc60678d5ff6558666b80fa9673c8ddc34609a96788fbf0371c75bf9adf669c25752378edf0ec65b75f7289cf3ab8807c7e64bfaf894407
- SSDEEP
  
  12288:ntKe6Zv23YeVOsiFKClC1NJhkbOOpPFrVQE61N4:76Zv2lZiFTqD2OOprQNN4
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence