343259afa016e470b5ad05d0fb6bbdb7259b95211425814179d18c1c6619dce3 | Triage

Sharing

General

Target

343259afa016e470b5ad05d0fb6bbdb7259b95211425814179d18c1c6619dce3N
Size

88KB
Sample

240919-hpnefswemn
MD5

1952da201837e633a68990f307c98280
SHA1

05787a9a764a96e5af585460696f9ad8b60a0743
SHA256

343259afa016e470b5ad05d0fb6bbdb7259b95211425814179d18c1c6619dce3
SHA512

caf82b9b7bdf3dc2c923d0775897c0ada0f1ad3534440119664895f806d08e8b0f1e4650570b192e7920cb2a902c6648da90aa32b588689a227aca5c5131ff81
SSDEEP

768:5vw9816thKQLroQ4/wQUNrfrunMxVFA3d:lEG/0oQlrunMxVS3d

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  343259afa016e470b5ad05d0fb6bbdb7259b95211425814179d18c1c6619dce3N
- Size
  
  88KB
- MD5
  
  1952da201837e633a68990f307c98280
- SHA1
  
  05787a9a764a96e5af585460696f9ad8b60a0743
- SHA256
  
  343259afa016e470b5ad05d0fb6bbdb7259b95211425814179d18c1c6619dce3
- SHA512
  
  caf82b9b7bdf3dc2c923d0775897c0ada0f1ad3534440119664895f806d08e8b0f1e4650570b192e7920cb2a902c6648da90aa32b588689a227aca5c5131ff81
- SSDEEP
  
  768:5vw9816thKQLroQ4/wQUNrfrunMxVFA3d:lEG/0oQlrunMxVS3d
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence