5f251260a5c406ac446459cd515c78f6f769aa396c3252ca0858516a5335c24d | Triage

Sharing

General

Target

efa16d4fe3e1d09cf2fbde61533a54f0N
Size

64KB
Sample

240915-cwwfra1djf
MD5

efa16d4fe3e1d09cf2fbde61533a54f0
SHA1

8242770a1c6bba119c32c6ea3edaed0b401a90e9
SHA256

5f251260a5c406ac446459cd515c78f6f769aa396c3252ca0858516a5335c24d
SHA512

ef5cc9f41662c14cba96b0a765f569486f2dff5f77286232eb6675a70ad26508a51012bc3bf6093807678d6838f16987d6d58338138354357e182930a1ea6d1e
SSDEEP

384:ObLwOs8AHsc42MfwhKQLroI4/CFsrdHWMZE:Ovw981EvhKQLroI4/wQpWMZE

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  efa16d4fe3e1d09cf2fbde61533a54f0N
- Size
  
  64KB
- MD5
  
  efa16d4fe3e1d09cf2fbde61533a54f0
- SHA1
  
  8242770a1c6bba119c32c6ea3edaed0b401a90e9
- SHA256
  
  5f251260a5c406ac446459cd515c78f6f769aa396c3252ca0858516a5335c24d
- SHA512
  
  ef5cc9f41662c14cba96b0a765f569486f2dff5f77286232eb6675a70ad26508a51012bc3bf6093807678d6838f16987d6d58338138354357e182930a1ea6d1e
- SSDEEP
  
  384:ObLwOs8AHsc42MfwhKQLroI4/CFsrdHWMZE:Ovw981EvhKQLroI4/wQpWMZE
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence