a74e55ff6db2f98931603d27f84dea89564f49c0a8fbf40f1bdd664e4ac60c5b | Triage

Sharing

General

Target

a74e55ff6db2f98931603d27f84dea89564f49c0a8fbf40f1bdd664e4ac60c5b
Size

90KB
Sample

240902-ckrneszcqd
MD5

ce3e1db6227ae6b930fbc421ef470735
SHA1

9d7163b8e70bac8bb47a80b47f7b55f48dbb5162
SHA256

a74e55ff6db2f98931603d27f84dea89564f49c0a8fbf40f1bdd664e4ac60c5b
SHA512

e565745a3b7342135a10b2a37ccd1ec4b82cca52194bca2bceac78f64fd97c36f1188296efed874cd3f0f63405b54e3d8e93c1600c8df5299ea56981df4cb14d
SSDEEP

768:Qvw9816vhKQLroQ4/wQRNrfrunMxVFA3b7gl/:YEGh0oQl2unMxVS3HgR

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  a74e55ff6db2f98931603d27f84dea89564f49c0a8fbf40f1bdd664e4ac60c5b
- Size
  
  90KB
- MD5
  
  ce3e1db6227ae6b930fbc421ef470735
- SHA1
  
  9d7163b8e70bac8bb47a80b47f7b55f48dbb5162
- SHA256
  
  a74e55ff6db2f98931603d27f84dea89564f49c0a8fbf40f1bdd664e4ac60c5b
- SHA512
  
  e565745a3b7342135a10b2a37ccd1ec4b82cca52194bca2bceac78f64fd97c36f1188296efed874cd3f0f63405b54e3d8e93c1600c8df5299ea56981df4cb14d
- SSDEEP
  
  768:Qvw9816vhKQLroQ4/wQRNrfrunMxVFA3b7gl/:YEGh0oQl2unMxVS3HgR
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence