3ff41d79fadb78481dccfd5f3020b638bcc2f41cca036d4204f2c9e59f37672b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcd053334fa684eba9ca15619bf06a50N.exe
Size

90KB
Sample

240905-yd85saxhqp
MD5

bcd053334fa684eba9ca15619bf06a50
SHA1

4759b9a7a3fb44c641701077ea99a9cc713b762c
SHA256

3ff41d79fadb78481dccfd5f3020b638bcc2f41cca036d4204f2c9e59f37672b
SHA512

64b58a3886ae06b21c9ec4062a5f8f95133e6ea4ef802c0e113e89ab0edc5a7eacc9b730a3a8dbdbf4aa2ead5a0897e3edcc2ab602d6c11e51cacd69245ce6e0
SSDEEP

768:Qvw9816vhKQLros4/wQRNrfrunMxVFA3b7gl/:YEGh0osl2unMxVS3HgR

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  bcd053334fa684eba9ca15619bf06a50N.exe
- Size
  
  90KB
- MD5
  
  bcd053334fa684eba9ca15619bf06a50
- SHA1
  
  4759b9a7a3fb44c641701077ea99a9cc713b762c
- SHA256
  
  3ff41d79fadb78481dccfd5f3020b638bcc2f41cca036d4204f2c9e59f37672b
- SHA512
  
  64b58a3886ae06b21c9ec4062a5f8f95133e6ea4ef802c0e113e89ab0edc5a7eacc9b730a3a8dbdbf4aa2ead5a0897e3edcc2ab602d6c11e51cacd69245ce6e0
- SSDEEP
  
  768:Qvw9816vhKQLros4/wQRNrfrunMxVFA3b7gl/:YEGh0osl2unMxVS3HgR
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence