cd0e960fc76221a6e104194b4a0a8452669910228319848eb51d23b6d02493c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Trojan.Autorun.ATA_virussign.com_d6a71206d7bf7eb99353e517e6b39b63.exe
Size

37KB
Sample

240907-pvxzeavhmj
MD5

d6a71206d7bf7eb99353e517e6b39b63
SHA1

8b80397ecd459a0397682c7b0250845c47e392a0
SHA256

cd0e960fc76221a6e104194b4a0a8452669910228319848eb51d23b6d02493c0
SHA512

0f6335cd7cabfd69f331790e4a36e6aef4b2019d988a99958e49bf26bc166b247f6b13f6048301b17dabf14c1174c97f36e73e04538e532c8247fb1128cc7106
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IV:e6q10k0EFjed6rqJ+6vghzwYu7vih9G5

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  Trojan.Autorun.ATA_virussign.com_d6a71206d7bf7eb99353e517e6b39b63.exe
- Size
  
  37KB
- MD5
  
  d6a71206d7bf7eb99353e517e6b39b63
- SHA1
  
  8b80397ecd459a0397682c7b0250845c47e392a0
- SHA256
  
  cd0e960fc76221a6e104194b4a0a8452669910228319848eb51d23b6d02493c0
- SHA512
  
  0f6335cd7cabfd69f331790e4a36e6aef4b2019d988a99958e49bf26bc166b247f6b13f6048301b17dabf14c1174c97f36e73e04538e532c8247fb1128cc7106
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IV:e6q10k0EFjed6rqJ+6vghzwYu7vih9G5
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence