b9a7b3890d3f39895253fcc66428c168f77cfc21ef5983067b62486726d2eb50 | Triage

Sharing

General

Target

bda0b2ac0f15cf6de33d4a242e07cde0N.exe
Size

76KB
Sample

240825-anxmqszapk
MD5

bda0b2ac0f15cf6de33d4a242e07cde0
SHA1

5f7d3f6b85d1da8dfe55efea7e88310b125241fc
SHA256

b9a7b3890d3f39895253fcc66428c168f77cfc21ef5983067b62486726d2eb50
SHA512

55fd2e6a598e8e7f783af47d9c6cbadb0b8f46513a7b1e306b368b90139d3e17a5f6a7318a9d59bc06940884af0123190b781d616973f0c58412e48ba960aea1
SSDEEP

1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvP3OInvnHvvxIfhqhcGoI/m:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhAm

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  bda0b2ac0f15cf6de33d4a242e07cde0N.exe
- Size
  
  76KB
- MD5
  
  bda0b2ac0f15cf6de33d4a242e07cde0
- SHA1
  
  5f7d3f6b85d1da8dfe55efea7e88310b125241fc
- SHA256
  
  b9a7b3890d3f39895253fcc66428c168f77cfc21ef5983067b62486726d2eb50
- SHA512
  
  55fd2e6a598e8e7f783af47d9c6cbadb0b8f46513a7b1e306b368b90139d3e17a5f6a7318a9d59bc06940884af0123190b781d616973f0c58412e48ba960aea1
- SSDEEP
  
  1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvP3OInvnHvvxIfhqhcGoI/m:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhAm
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence