e6ae460762e9a78a26c5990cbc0ab530217ab030df083fbe24d5358a564f1b14 | Triage

Sharing

General

Target

487b263e2218ce7ca2542a9186d9d650N.exe
Size

44KB
Sample

240905-p81x8asbpf
MD5

487b263e2218ce7ca2542a9186d9d650
SHA1

1231cdc86d4ac099c94d0e7ec38e85c7bb9573b3
SHA256

e6ae460762e9a78a26c5990cbc0ab530217ab030df083fbe24d5358a564f1b14
SHA512

d53f95eeefd69859ad87f004480a12ebec3ab2ada8e31280752dde17fc2591e031c4fdd8bba411d373910e262555ca58081980c072df434557b7fb869eb53265
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhF:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYl

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  487b263e2218ce7ca2542a9186d9d650N.exe
- Size
  
  44KB
- MD5
  
  487b263e2218ce7ca2542a9186d9d650
- SHA1
  
  1231cdc86d4ac099c94d0e7ec38e85c7bb9573b3
- SHA256
  
  e6ae460762e9a78a26c5990cbc0ab530217ab030df083fbe24d5358a564f1b14
- SHA512
  
  d53f95eeefd69859ad87f004480a12ebec3ab2ada8e31280752dde17fc2591e031c4fdd8bba411d373910e262555ca58081980c072df434557b7fb869eb53265
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhF:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYl
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence