d7b728f75d7a4063764c80b0456a73d1a2e477fc727575c7d6450c8291c27417 | Triage

Sharing

General

Target

cb06590256be0ac57f30f0e9aaa0a680N
Size

89KB
Sample

240908-ejl3nawhpf
MD5

cb06590256be0ac57f30f0e9aaa0a680
SHA1

a8362aaa945ff28ed9bc3dd0c1414106447e5221
SHA256

d7b728f75d7a4063764c80b0456a73d1a2e477fc727575c7d6450c8291c27417
SHA512

e3bb0076f653ff9d3d38eaaa6119fa6629e11f5145929b817264b9ce187b556f7103b3118870ea38955a4b63eab5cf28e9f5fb2428daa2e5750d82719b527362
SSDEEP

768:Qvw9816vhKQLroDb4/wQRNrfrunMxVFA3b7glL:YEGh0ofl2unMxVS3Hg9

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  cb06590256be0ac57f30f0e9aaa0a680N
- Size
  
  89KB
- MD5
  
  cb06590256be0ac57f30f0e9aaa0a680
- SHA1
  
  a8362aaa945ff28ed9bc3dd0c1414106447e5221
- SHA256
  
  d7b728f75d7a4063764c80b0456a73d1a2e477fc727575c7d6450c8291c27417
- SHA512
  
  e3bb0076f653ff9d3d38eaaa6119fa6629e11f5145929b817264b9ce187b556f7103b3118870ea38955a4b63eab5cf28e9f5fb2428daa2e5750d82719b527362
- SSDEEP
  
  768:Qvw9816vhKQLroDb4/wQRNrfrunMxVFA3b7glL:YEGh0ofl2unMxVS3Hg9
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence