e3b60ac90f02a9342d8c7133a94018f2207661006cb7f0d2fcfce94c61287e5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3b60ac90f02a9342d8c7133a94018f2207661006cb7f0d2fcfce94c61287e5dN
Size

68KB
Sample

240919-jdgm7sxdma
MD5

58d136920faa1284028ebe92fe1d6250
SHA1

d2e6ce5876b9ef26feff94aaa0497e08f8df2e7c
SHA256

e3b60ac90f02a9342d8c7133a94018f2207661006cb7f0d2fcfce94c61287e5d
SHA512

38841455fc53acaec81a208bb9528865c3fe340683b5feb41cefc1c0c330010032471122cf655777fa0286e5744cf23325834962c4710ab3989751f8ed5370ac
SSDEEP

768:FsFl3VOcV1OEqy7igfh9zuwrZXA6Wl9Oy2nfUECHpXuRNFCik5TRo7tJMWwl:FsBOppy7/hu4A6W+D3CEgdBWm

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e3b60ac90f02a9342d8c7133a94018f2207661006cb7f0d2fcfce94c61287e5dN
- Size
  
  68KB
- MD5
  
  58d136920faa1284028ebe92fe1d6250
- SHA1
  
  d2e6ce5876b9ef26feff94aaa0497e08f8df2e7c
- SHA256
  
  e3b60ac90f02a9342d8c7133a94018f2207661006cb7f0d2fcfce94c61287e5d
- SHA512
  
  38841455fc53acaec81a208bb9528865c3fe340683b5feb41cefc1c0c330010032471122cf655777fa0286e5744cf23325834962c4710ab3989751f8ed5370ac
- SSDEEP
  
  768:FsFl3VOcV1OEqy7igfh9zuwrZXA6Wl9Oy2nfUECHpXuRNFCik5TRo7tJMWwl:FsBOppy7/hu4A6W+D3CEgdBWm
Score

7^/10

discovery persistence
- Drops startup file
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence