b2e2ce660df1c909466b75e933f26f4e166a79f8433e5e6e04752e40765246e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cef9ee08f0785910683c315e768ff9e0N
Size

255KB
Sample

240909-pej3lszblf
MD5

cef9ee08f0785910683c315e768ff9e0
SHA1

1cac19666cece37e9fda9d0a3ae6fecdad20c6d5
SHA256

b2e2ce660df1c909466b75e933f26f4e166a79f8433e5e6e04752e40765246e4
SHA512

8caea4ed4aa2b847c40f6a1000157221160689b5a5314fc0aa0044a5594c3a9c6860ffcfd3c5c8b94eb779d61f076a81d11356f5e81b36b9cdc31fdaa2ea5146
SSDEEP

6144:ocpiTSfDhpnShDi/SOifQsRCHplF6UWLGqpXW:wTSfDh8DiqjbwJbhwXW

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  cef9ee08f0785910683c315e768ff9e0N
- Size
  
  255KB
- MD5
  
  cef9ee08f0785910683c315e768ff9e0
- SHA1
  
  1cac19666cece37e9fda9d0a3ae6fecdad20c6d5
- SHA256
  
  b2e2ce660df1c909466b75e933f26f4e166a79f8433e5e6e04752e40765246e4
- SHA512
  
  8caea4ed4aa2b847c40f6a1000157221160689b5a5314fc0aa0044a5594c3a9c6860ffcfd3c5c8b94eb779d61f076a81d11356f5e81b36b9cdc31fdaa2ea5146
- SSDEEP
  
  6144:ocpiTSfDhpnShDi/SOifQsRCHplF6UWLGqpXW:wTSfDh8DiqjbwJbhwXW
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation