1a9e3347bc52c529aa5d24dc71da2afacc46f8940a0ee4ee5ab0a1414c5736c0 | Triage

Sharing

General

Target

b1c183d301c33f72866ef9071d8b2340N.exe
Size

90KB
Sample

240904-zga8lawbpj
MD5

b1c183d301c33f72866ef9071d8b2340
SHA1

f6921d3e4f6a05c25ae3e30a2b91f58e2cfe423d
SHA256

1a9e3347bc52c529aa5d24dc71da2afacc46f8940a0ee4ee5ab0a1414c5736c0
SHA512

f63f6e6ca960060be7f097b0521a3245a858d6b65c0617946d85efb284a5605a3853f0418c63151609e78446b0e9a558c377bfc6c27e9acf32548b83323708e7
SSDEEP

768:Qvw9816vhKQLrot4/wQRNrfrunMxVFA3b7glw6:YEGh0otl2unMxVS3Hgl

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1c183d301c33f72866ef9071d8b2340N.exe
- Size
  
  90KB
- MD5
  
  b1c183d301c33f72866ef9071d8b2340
- SHA1
  
  f6921d3e4f6a05c25ae3e30a2b91f58e2cfe423d
- SHA256
  
  1a9e3347bc52c529aa5d24dc71da2afacc46f8940a0ee4ee5ab0a1414c5736c0
- SHA512
  
  f63f6e6ca960060be7f097b0521a3245a858d6b65c0617946d85efb284a5605a3853f0418c63151609e78446b0e9a558c377bfc6c27e9acf32548b83323708e7
- SSDEEP
  
  768:Qvw9816vhKQLrot4/wQRNrfrunMxVFA3b7glw6:YEGh0otl2unMxVS3Hgl
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence