e3190359a596a6e744ba2c9301b14837f1bee2b6f4bf28a8dd6e90ac07fd9d13 | Triage

Sharing

General

Target

e3190359a596a6e744ba2c9301b14837f1bee2b6f4bf28a8dd6e90ac07fd9d13
Size

48KB
Sample

240919-dckqksxdrm
MD5

252239eb802b4d5b201a03b82b45eb6c
SHA1

2d04cd081418718680ccfd2628a16ec432c2d291
SHA256

e3190359a596a6e744ba2c9301b14837f1bee2b6f4bf28a8dd6e90ac07fd9d13
SHA512

92b50c769168692e974bf1e3407d48a7f039dae815495aba23a97681251696999cd315bf669e743359c341160ac760b191e05e5bfdc5b3d4d431a27cec8a1129
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIy:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e3190359a596a6e744ba2c9301b14837f1bee2b6f4bf28a8dd6e90ac07fd9d13
- Size
  
  48KB
- MD5
  
  252239eb802b4d5b201a03b82b45eb6c
- SHA1
  
  2d04cd081418718680ccfd2628a16ec432c2d291
- SHA256
  
  e3190359a596a6e744ba2c9301b14837f1bee2b6f4bf28a8dd6e90ac07fd9d13
- SHA512
  
  92b50c769168692e974bf1e3407d48a7f039dae815495aba23a97681251696999cd315bf669e743359c341160ac760b191e05e5bfdc5b3d4d431a27cec8a1129
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIy:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV4
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence