2812ff6d68ac7a3f47e09fc89c7fb6565093bd1ea3d1b1adfd8948eba724cdb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2812ff6d68ac7a3f47e09fc89c7fb6565093bd1ea3d1b1adfd8948eba724cdb0
Size

80KB
Sample

240828-yy9l2swajk
MD5

9a78d7c98cad77dc28204bf3ae7cee82
SHA1

9c3db91bb7c09836177b4640b89c10d1bf43fdc2
SHA256

2812ff6d68ac7a3f47e09fc89c7fb6565093bd1ea3d1b1adfd8948eba724cdb0
SHA512

5152e062103c0b7fcf85cc532af51b976f4d45ec59aee22b1a3c067f7bdc65eaa72c513b3fc6740ee59197d5916095c29b2df5da3585f3162545f4ef7bbf947f
SSDEEP

384:vbLwOs8AHsc4sMfwhKQLroX4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroX4/wQRNrfrunMxVFAi

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2812ff6d68ac7a3f47e09fc89c7fb6565093bd1ea3d1b1adfd8948eba724cdb0
- Size
  
  80KB
- MD5
  
  9a78d7c98cad77dc28204bf3ae7cee82
- SHA1
  
  9c3db91bb7c09836177b4640b89c10d1bf43fdc2
- SHA256
  
  2812ff6d68ac7a3f47e09fc89c7fb6565093bd1ea3d1b1adfd8948eba724cdb0
- SHA512
  
  5152e062103c0b7fcf85cc532af51b976f4d45ec59aee22b1a3c067f7bdc65eaa72c513b3fc6740ee59197d5916095c29b2df5da3585f3162545f4ef7bbf947f
- SSDEEP
  
  384:vbLwOs8AHsc4sMfwhKQLroX4/CFsrdOI1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUOV:vvw9816vhKQLroX4/wQRNrfrunMxVFAi
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence