b64ff5f1c84c8bc597d5c3b16be49d4add17ba27d790797e80e650e4f615b67c | Triage

Sharing

General

Target

b64ff5f1c84c8bc597d5c3b16be49d4add17ba27d790797e80e650e4f615b67c
Size

197KB
Sample

240909-cdvrhawdqm
MD5

d5dedeed045daa6f7dcdc079187b3e25
SHA1

8e3f34a25da743d73f247ac6e8c01bf7de30bf61
SHA256

b64ff5f1c84c8bc597d5c3b16be49d4add17ba27d790797e80e650e4f615b67c
SHA512

60a193eee2700e1113131e67099ca671e33be13c8912c04186607b5bff73359650fb3339641b94d903466b7e0c3a7b7105769f2929433469ad4ce026e4bc9382
SSDEEP

3072:jEGh0oKl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGwlEeKcAEca

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b64ff5f1c84c8bc597d5c3b16be49d4add17ba27d790797e80e650e4f615b67c
- Size
  
  197KB
- MD5
  
  d5dedeed045daa6f7dcdc079187b3e25
- SHA1
  
  8e3f34a25da743d73f247ac6e8c01bf7de30bf61
- SHA256
  
  b64ff5f1c84c8bc597d5c3b16be49d4add17ba27d790797e80e650e4f615b67c
- SHA512
  
  60a193eee2700e1113131e67099ca671e33be13c8912c04186607b5bff73359650fb3339641b94d903466b7e0c3a7b7105769f2929433469ad4ce026e4bc9382
- SSDEEP
  
  3072:jEGh0oKl+Oso7ie+rcC4F0fJGRIS8Rfd7eQEcGcrcMQ:jEGwlEeKcAEca
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence