9a88e47610e8b79078e7b968302d0421c067136e4211e238ebc8cc9aeda3fd2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a88e47610e8b79078e7b968302d0421c067136e4211e238ebc8cc9aeda3fd2f
Size

46KB
Sample

240913-a2bx7avarm
MD5

75bc2d2020cb706c411f8b30734c73d2
SHA1

b68eb9b99fbd304d0674e571ce127a7750e3b089
SHA256

9a88e47610e8b79078e7b968302d0421c067136e4211e238ebc8cc9aeda3fd2f
SHA512

9c0ea0edc97a1e2f444ce0b7ec50e270e144e62c20a07cb89581bb1f53815a4333f672a181f7cc9bd77a9dfd951d0a573a7c806d97e5abf63b7d8b8eba5af803
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhK:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYq

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9a88e47610e8b79078e7b968302d0421c067136e4211e238ebc8cc9aeda3fd2f
- Size
  
  46KB
- MD5
  
  75bc2d2020cb706c411f8b30734c73d2
- SHA1
  
  b68eb9b99fbd304d0674e571ce127a7750e3b089
- SHA256
  
  9a88e47610e8b79078e7b968302d0421c067136e4211e238ebc8cc9aeda3fd2f
- SHA512
  
  9c0ea0edc97a1e2f444ce0b7ec50e270e144e62c20a07cb89581bb1f53815a4333f672a181f7cc9bd77a9dfd951d0a573a7c806d97e5abf63b7d8b8eba5af803
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhK:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYq
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence