5fc351c3de5088a23ed131b4539000a7066b92af02ba7780dbb43b1f7641b5db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db809396a444d96e01f0a0c98d8db580N.exe
Size

41KB
Sample

240903-rm127szfrh
MD5

db809396a444d96e01f0a0c98d8db580
SHA1

ae670b7f30e0be740de8522e75630fc86a829e60
SHA256

5fc351c3de5088a23ed131b4539000a7066b92af02ba7780dbb43b1f7641b5db
SHA512

43c1a7e2b915df99f894b2faf27be2412c39d1c954258e6630a380d2a4a5244299086ba74567819c1e35867f6bbad0bddfbb5e308127eb797f1cebd02c159c3d
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhb:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY7

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  db809396a444d96e01f0a0c98d8db580N.exe
- Size
  
  41KB
- MD5
  
  db809396a444d96e01f0a0c98d8db580
- SHA1
  
  ae670b7f30e0be740de8522e75630fc86a829e60
- SHA256
  
  5fc351c3de5088a23ed131b4539000a7066b92af02ba7780dbb43b1f7641b5db
- SHA512
  
  43c1a7e2b915df99f894b2faf27be2412c39d1c954258e6630a380d2a4a5244299086ba74567819c1e35867f6bbad0bddfbb5e308127eb797f1cebd02c159c3d
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhb:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY7
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence