795489639cbc4dd219b46f2a4c815f4ef619a7903aeb958218edd15e6e32887e | Triage

Sharing

General

Target

795489639cbc4dd219b46f2a4c815f4ef619a7903aeb958218edd15e6e32887eN
Size

43KB
Sample

240919-haqk9svhmp
MD5

ff65c6005e48d197639747435a7323c0
SHA1

49e99beb7dc2b6dd8146b44b9db6dbe7b3dadef8
SHA256

795489639cbc4dd219b46f2a4c815f4ef619a7903aeb958218edd15e6e32887e
SHA512

8159364f8ca8d80b29f3c42ec5f72a487a542dd7e1c06904a41b84135dcf7118b0ef76b1262945484d30bb88a2dbb1b04329d9b1360be1aaa1832abcb097324b
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh/:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYf

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  795489639cbc4dd219b46f2a4c815f4ef619a7903aeb958218edd15e6e32887eN
- Size
  
  43KB
- MD5
  
  ff65c6005e48d197639747435a7323c0
- SHA1
  
  49e99beb7dc2b6dd8146b44b9db6dbe7b3dadef8
- SHA256
  
  795489639cbc4dd219b46f2a4c815f4ef619a7903aeb958218edd15e6e32887e
- SHA512
  
  8159364f8ca8d80b29f3c42ec5f72a487a542dd7e1c06904a41b84135dcf7118b0ef76b1262945484d30bb88a2dbb1b04329d9b1360be1aaa1832abcb097324b
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNh/:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYf
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence