713f4367401bd0ae67973059e892f1580e638ba0a738ba8ab8a3e7b3ab6e8def | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3a9997b0ad0a356ec9ae18dd7b872c0N.exe
Size

1.3MB
Sample

240829-l3qcraxgnm
MD5

e3a9997b0ad0a356ec9ae18dd7b872c0
SHA1

6fa907506f3116fca62fd16914e4ac585c974c68
SHA256

713f4367401bd0ae67973059e892f1580e638ba0a738ba8ab8a3e7b3ab6e8def
SHA512

ea8ab2413b3485a3abcd4b8c6f808b817067ba736fc3c60d763568db7205f6c6d91f388359969fe0d2a4cbab01e38ac1ecae6a2b11235593ffef41fb9246c446
SSDEEP

24576:t2mWTd2HVH5OtZbLOTePN6lQvbOI1QjIVE0+4+AYMsbo:2Tg1H5iL11vvaCQUVE0l+Al

Score

7^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  e3a9997b0ad0a356ec9ae18dd7b872c0N.exe
- Size
  
  1.3MB
- MD5
  
  e3a9997b0ad0a356ec9ae18dd7b872c0
- SHA1
  
  6fa907506f3116fca62fd16914e4ac585c974c68
- SHA256
  
  713f4367401bd0ae67973059e892f1580e638ba0a738ba8ab8a3e7b3ab6e8def
- SHA512
  
  ea8ab2413b3485a3abcd4b8c6f808b817067ba736fc3c60d763568db7205f6c6d91f388359969fe0d2a4cbab01e38ac1ecae6a2b11235593ffef41fb9246c446
- SSDEEP
  
  24576:t2mWTd2HVH5OtZbLOTePN6lQvbOI1QjIVE0+4+AYMsbo:2Tg1H5iL11vvaCQUVE0l+Al
Score

7^/10

discovery persistence privilege_escalation
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Component Object Model Hijacking

Privilege Escalation

Event Triggered Execution

Component Object Model Hijacking

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation