1ddc8a5e5d1358e106b052e6182ef7b475f9b9259b7fd0a95b45ab1481148b36 | Triage

Sharing

General

Target

b19583322bc865128a7619a0739a0700N.exe
Size

129KB
Sample

240826-jakkpasbqa
MD5

b19583322bc865128a7619a0739a0700
SHA1

403bf68207a3994f330752a9f7d7a74a1eba4d26
SHA256

1ddc8a5e5d1358e106b052e6182ef7b475f9b9259b7fd0a95b45ab1481148b36
SHA512

3793ee305b5b77e53b4c06f79e9585fed2cf1ed33fa69dbfd524fa74bf4cc56055f8cd30b99dda868dd37c12d71816156f9197a278e3b99c480c26f360feb0e5
SSDEEP

3072:knZjfso0f5z9f57fgDWChiOzl0LEnFvUf4FnWRYCdG:kndp0f5z77fgDNlzl0L0dUf2WRNdG

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  b19583322bc865128a7619a0739a0700N.exe
- Size
  
  129KB
- MD5
  
  b19583322bc865128a7619a0739a0700
- SHA1
  
  403bf68207a3994f330752a9f7d7a74a1eba4d26
- SHA256
  
  1ddc8a5e5d1358e106b052e6182ef7b475f9b9259b7fd0a95b45ab1481148b36
- SHA512
  
  3793ee305b5b77e53b4c06f79e9585fed2cf1ed33fa69dbfd524fa74bf4cc56055f8cd30b99dda868dd37c12d71816156f9197a278e3b99c480c26f360feb0e5
- SSDEEP
  
  3072:knZjfso0f5z9f57fgDWChiOzl0LEnFvUf4FnWRYCdG:kndp0f5z77fgDNlzl0L0dUf2WRNdG
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation