654289647bb122e15c3a8ed16274169109be4077d9b630662ad998203280051a | Triage

Sharing

General

Target

4b44797f9ba623cccbe5041c9dd0fb40N.exe
Size

91KB
Sample

240903-r5p3nazcqr
MD5

4b44797f9ba623cccbe5041c9dd0fb40
SHA1

5e1a8d221a6c69e2a6491739332f8808acd28a38
SHA256

654289647bb122e15c3a8ed16274169109be4077d9b630662ad998203280051a
SHA512

39fc02e4ec7669cfd2a2fa9237e18a85036b94fd2f7051f196c9330dda2f40bb353d90bc53046467784b99b39055efd9ece274b926c1053c4b2fe8adb68c9619
SSDEEP

768:5vw9816uhKiroK4/wQNNrfrunMxVFA3b7t:lEGkmoKlCunMxVS3Ht

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  4b44797f9ba623cccbe5041c9dd0fb40N.exe
- Size
  
  91KB
- MD5
  
  4b44797f9ba623cccbe5041c9dd0fb40
- SHA1
  
  5e1a8d221a6c69e2a6491739332f8808acd28a38
- SHA256
  
  654289647bb122e15c3a8ed16274169109be4077d9b630662ad998203280051a
- SHA512
  
  39fc02e4ec7669cfd2a2fa9237e18a85036b94fd2f7051f196c9330dda2f40bb353d90bc53046467784b99b39055efd9ece274b926c1053c4b2fe8adb68c9619
- SSDEEP
  
  768:5vw9816uhKiroK4/wQNNrfrunMxVFA3b7t:lEGkmoKlCunMxVS3Ht
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence