9a2c410388f9a8e8ddc268a0e5e357d17771f3a8e73a93577d897ecdcbec5199 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c6dc401940fea050eb45f603a22d850N
Size

90KB
Sample

240914-qrh7hswgnf
MD5

1c6dc401940fea050eb45f603a22d850
SHA1

edf80e7f5bdf502d938f027bfbbe9774dd3e71c9
SHA256

9a2c410388f9a8e8ddc268a0e5e357d17771f3a8e73a93577d897ecdcbec5199
SHA512

1c16ed49d70ad2df5fe32b1e85c4a4f17eb6ae40354a7fbea5d0c6c068e55cc99e80159222e0681e914bc73cf4f1630b6b854194538f186a0d97918a85077454
SSDEEP

768:Qvw9816vhKQLroy4/wQRNrfrunMxVFA3b7glw6:YEGh0oyl2unMxVS3Hgl

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  1c6dc401940fea050eb45f603a22d850N
- Size
  
  90KB
- MD5
  
  1c6dc401940fea050eb45f603a22d850
- SHA1
  
  edf80e7f5bdf502d938f027bfbbe9774dd3e71c9
- SHA256
  
  9a2c410388f9a8e8ddc268a0e5e357d17771f3a8e73a93577d897ecdcbec5199
- SHA512
  
  1c16ed49d70ad2df5fe32b1e85c4a4f17eb6ae40354a7fbea5d0c6c068e55cc99e80159222e0681e914bc73cf4f1630b6b854194538f186a0d97918a85077454
- SSDEEP
  
  768:Qvw9816vhKQLroy4/wQRNrfrunMxVFA3b7glw6:YEGh0oyl2unMxVS3Hgl
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence