eb690b5917eff9ba739ecf878640fd0aca27deba73852cb0c0c2fa3504433003 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb690b5917eff9ba739ecf878640fd0aca27deba73852cb0c0c2fa3504433003
Size

41KB
Sample

240825-hlz9vascmm
MD5

cc0b6d779e32257de6929e85d6cf4869
SHA1

fe89e9b057e6fb94fccb56ad27d7bc9116b86db9
SHA256

eb690b5917eff9ba739ecf878640fd0aca27deba73852cb0c0c2fa3504433003
SHA512

50fb6a43f12955787a1784708d44d6492dc946609c6cfa468d8da3e403860f778d789edeeb244f19ab306cb19d51e3bd46c0f15949fb488fb06d7105463d74e0
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhu:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYO

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  eb690b5917eff9ba739ecf878640fd0aca27deba73852cb0c0c2fa3504433003
- Size
  
  41KB
- MD5
  
  cc0b6d779e32257de6929e85d6cf4869
- SHA1
  
  fe89e9b057e6fb94fccb56ad27d7bc9116b86db9
- SHA256
  
  eb690b5917eff9ba739ecf878640fd0aca27deba73852cb0c0c2fa3504433003
- SHA512
  
  50fb6a43f12955787a1784708d44d6492dc946609c6cfa468d8da3e403860f778d789edeeb244f19ab306cb19d51e3bd46c0f15949fb488fb06d7105463d74e0
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhu:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYO
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence