3aa52572c3af94c993f24ad94f6943fffb46232b6e887895d7fd3b28650223bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0fc8ccb9330e7ff1aac22dc7ce210e0N
Size

47KB
Sample

240914-z2lvtswfpk
MD5

d0fc8ccb9330e7ff1aac22dc7ce210e0
SHA1

15c0cb752422f015e0eb4723ec87a8334304643a
SHA256

3aa52572c3af94c993f24ad94f6943fffb46232b6e887895d7fd3b28650223bf
SHA512

ad813eec686f960d448e70106c90ffda6af785d1374a52d6c6639a41f6962217c58753a83bde96818f917cc9c9682faff4b7d9f49f3edd14d85965bc7bc5bd70
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhp:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYJ

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d0fc8ccb9330e7ff1aac22dc7ce210e0N
- Size
  
  47KB
- MD5
  
  d0fc8ccb9330e7ff1aac22dc7ce210e0
- SHA1
  
  15c0cb752422f015e0eb4723ec87a8334304643a
- SHA256
  
  3aa52572c3af94c993f24ad94f6943fffb46232b6e887895d7fd3b28650223bf
- SHA512
  
  ad813eec686f960d448e70106c90ffda6af785d1374a52d6c6639a41f6962217c58753a83bde96818f917cc9c9682faff4b7d9f49f3edd14d85965bc7bc5bd70
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhp:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYJ
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence