290650231e3ba32135a19421ff8fc05d3aa2d3bdc6c8804be104b0bf51ed646a | Triage

Sharing

General

Target

290650231e3ba32135a19421ff8fc05d3aa2d3bdc6c8804be104b0bf51ed646a
Size

52KB
Sample

240828-y1tcvawapm
MD5

43daee431e96ef8668d3219fb0c5fb7a
SHA1

14e105e578dd8b91d2391d13bf0e7ec11ba1e539
SHA256

290650231e3ba32135a19421ff8fc05d3aa2d3bdc6c8804be104b0bf51ed646a
SHA512

912910cd483742e17a40a4829272876fd2d65b7b373d698970ac06382c74c955aec0c0182391f6796aea3d5e9938c7d31ae1bbe19bed0aa7d75308c12c58d444
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIF:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV/

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  290650231e3ba32135a19421ff8fc05d3aa2d3bdc6c8804be104b0bf51ed646a
- Size
  
  52KB
- MD5
  
  43daee431e96ef8668d3219fb0c5fb7a
- SHA1
  
  14e105e578dd8b91d2391d13bf0e7ec11ba1e539
- SHA256
  
  290650231e3ba32135a19421ff8fc05d3aa2d3bdc6c8804be104b0bf51ed646a
- SHA512
  
  912910cd483742e17a40a4829272876fd2d65b7b373d698970ac06382c74c955aec0c0182391f6796aea3d5e9938c7d31ae1bbe19bed0aa7d75308c12c58d444
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIF:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV/
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence