210294ba537b20c2688f5a1034f57db8008830a19d1c34aaf09ca828d372cef7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

210294ba537b20c2688f5a1034f57db8008830a19d1c34aaf09ca828d372cef7
Size

40KB
Sample

240913-yb4saavgjh
MD5

78268361270c72307f7b9227d7c02d40
SHA1

7b27890886187cbcc56e88fd84bdcab8d65587a3
SHA256

210294ba537b20c2688f5a1034f57db8008830a19d1c34aaf09ca828d372cef7
SHA512

599890cb09fd3ce732eb1d8188aa1ff4adcd7404132130c4339df7a8ad31b28615760438d9e1ec24e1cfbeaed6a1117b7f95699ad0e7c116f846e20dcc96179c
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhb:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY7

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  210294ba537b20c2688f5a1034f57db8008830a19d1c34aaf09ca828d372cef7
- Size
  
  40KB
- MD5
  
  78268361270c72307f7b9227d7c02d40
- SHA1
  
  7b27890886187cbcc56e88fd84bdcab8d65587a3
- SHA256
  
  210294ba537b20c2688f5a1034f57db8008830a19d1c34aaf09ca828d372cef7
- SHA512
  
  599890cb09fd3ce732eb1d8188aa1ff4adcd7404132130c4339df7a8ad31b28615760438d9e1ec24e1cfbeaed6a1117b7f95699ad0e7c116f846e20dcc96179c
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhb:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY7
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence