2aea86819a6b684a5fbcad254441232d03ce9c9d7a7841939f9a19097dc70df3 | Triage

Sharing

General

Target

2aea86819a6b684a5fbcad254441232d03ce9c9d7a7841939f9a19097dc70df3
Size

204KB
Sample

240903-yqagzsvhmp
MD5

812845a38d0e46c33d6158022a93546e
SHA1

b94bd84bf01c5f2ace6f57e68e1ef4f02e122027
SHA256

2aea86819a6b684a5fbcad254441232d03ce9c9d7a7841939f9a19097dc70df3
SHA512

b039e4d5b6b8bd5e2dccf4ec79ec2ae5f75eb8a8e864c64705c1706f6fd47f9ee0ca4bdc370fec0527621bf1f8bb7d25df134571887abd94f22d3e7d3ae90d7a
SSDEEP

1536:1EGh0oBl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3Hgdo:1EGh0oBl1OPOe2MUVg3Ve+rXfMUy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  2aea86819a6b684a5fbcad254441232d03ce9c9d7a7841939f9a19097dc70df3
- Size
  
  204KB
- MD5
  
  812845a38d0e46c33d6158022a93546e
- SHA1
  
  b94bd84bf01c5f2ace6f57e68e1ef4f02e122027
- SHA256
  
  2aea86819a6b684a5fbcad254441232d03ce9c9d7a7841939f9a19097dc70df3
- SHA512
  
  b039e4d5b6b8bd5e2dccf4ec79ec2ae5f75eb8a8e864c64705c1706f6fd47f9ee0ca4bdc370fec0527621bf1f8bb7d25df134571887abd94f22d3e7d3ae90d7a
- SSDEEP
  
  1536:1EGh0oBl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3Hgdo:1EGh0oBl1OPOe2MUVg3Ve+rXfMUy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence