d25caebcef796e3d931cb240a6c234799d6a1849cb29c5952c9498697c6f55fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d25caebcef796e3d931cb240a6c234799d6a1849cb29c5952c9498697c6f55fa
Size

98KB
Sample

240902-et3hdssdnc
MD5

6166f7ea7af82fd671310bd3e50567d6
SHA1

3ef0851c5f4a0304676500a515799e62b6a3159f
SHA256

d25caebcef796e3d931cb240a6c234799d6a1849cb29c5952c9498697c6f55fa
SHA512

edbda4d538d4dcdb3c8bce8e19820893b4c191508062e64044ff5befb729a74ddecefb788f7e8a37cd958aa674e783fc75280ee666bd97199754857ee2a919d8
SSDEEP

768:5vw9816thKQLroA4/wQkNrfrunMxVFA3b7glws:lEG/0oAlbunMxVS3Hgz

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d25caebcef796e3d931cb240a6c234799d6a1849cb29c5952c9498697c6f55fa
- Size
  
  98KB
- MD5
  
  6166f7ea7af82fd671310bd3e50567d6
- SHA1
  
  3ef0851c5f4a0304676500a515799e62b6a3159f
- SHA256
  
  d25caebcef796e3d931cb240a6c234799d6a1849cb29c5952c9498697c6f55fa
- SHA512
  
  edbda4d538d4dcdb3c8bce8e19820893b4c191508062e64044ff5befb729a74ddecefb788f7e8a37cd958aa674e783fc75280ee666bd97199754857ee2a919d8
- SSDEEP
  
  768:5vw9816thKQLroA4/wQkNrfrunMxVFA3b7glws:lEG/0oAlbunMxVS3Hgz
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence