6d95deb6d69fd6f279723fad262eb7f88c138410b03ebf39f73b4197f2a0aecf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d95deb6d69fd6f279723fad262eb7f88c138410b03ebf39f73b4197f2a0aecf
Size

47KB
Sample

240902-2zrdmszckr
MD5

5b84b41b6d81b4a327e5af8a43e1208d
SHA1

1d511598907e6a4930020a028e85138871e6d7ad
SHA256

6d95deb6d69fd6f279723fad262eb7f88c138410b03ebf39f73b4197f2a0aecf
SHA512

b37cbc29cb3abe2622fae3ca9e47d1e0c1793cdcf9a383909fdb403eaf23707a52eaa5f45fb7cf3477413b05cd5496f322bd776f9e285083401f82a8aef6e879
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhT:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYz

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6d95deb6d69fd6f279723fad262eb7f88c138410b03ebf39f73b4197f2a0aecf
- Size
  
  47KB
- MD5
  
  5b84b41b6d81b4a327e5af8a43e1208d
- SHA1
  
  1d511598907e6a4930020a028e85138871e6d7ad
- SHA256
  
  6d95deb6d69fd6f279723fad262eb7f88c138410b03ebf39f73b4197f2a0aecf
- SHA512
  
  b37cbc29cb3abe2622fae3ca9e47d1e0c1793cdcf9a383909fdb403eaf23707a52eaa5f45fb7cf3477413b05cd5496f322bd776f9e285083401f82a8aef6e879
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhT:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYz
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence