70d4848380a660400596ede2115e0bf3cf7ca4d695f04bdfc114ee24d7bdc828 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

174b49c0391925aa81157add3ea6e200N.exe
Size

90KB
Sample

240909-rxwkgatalk
MD5

174b49c0391925aa81157add3ea6e200
SHA1

39e701f001d346facca26f2fb5d966a33e32dc42
SHA256

70d4848380a660400596ede2115e0bf3cf7ca4d695f04bdfc114ee24d7bdc828
SHA512

a86485046dd46623d9a0e73a687556d9e4a52f22beb480e6e8cc87830533bf5fd5eb385765b858edb9137e330b6f328c6d13f87f9d71ae300a385092a4927882
SSDEEP

768:Qvw9816vhKQLroo4/wQRNrfrunMxVFA3b7glw:YEGh0ool2unMxVS3Hg

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  174b49c0391925aa81157add3ea6e200N.exe
- Size
  
  90KB
- MD5
  
  174b49c0391925aa81157add3ea6e200
- SHA1
  
  39e701f001d346facca26f2fb5d966a33e32dc42
- SHA256
  
  70d4848380a660400596ede2115e0bf3cf7ca4d695f04bdfc114ee24d7bdc828
- SHA512
  
  a86485046dd46623d9a0e73a687556d9e4a52f22beb480e6e8cc87830533bf5fd5eb385765b858edb9137e330b6f328c6d13f87f9d71ae300a385092a4927882
- SSDEEP
  
  768:Qvw9816vhKQLroo4/wQRNrfrunMxVFA3b7glw:YEGh0ool2unMxVS3Hg
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence