f3950599eb050afe282c46fee597cfc7e4a72e4967f02014f77486aeb5beb6d1 | Triage

Sharing

General

Target

f3950599eb050afe282c46fee597cfc7e4a72e4967f02014f77486aeb5beb6d1N
Size

89KB
Sample

240919-wmh9lsserr
MD5

9a358d41e5ef8bf9d0c9dbd12a166b60
SHA1

ce805212f5f2432fb7966fee5fedeb2f6aebc3db
SHA256

f3950599eb050afe282c46fee597cfc7e4a72e4967f02014f77486aeb5beb6d1
SHA512

96c189ada8508b92a9840e88618fe1d5c83ae78f04ac19627ef6c2195c03a9a221570a811449fc86f3054cc370103d9c29dab309dd1ddef63d281de9ddec42ad
SSDEEP

768:Qvw9816vhKQLrou4/wQRNrfrunMxVFA3b7glL:YEGh0oul2unMxVS3Hg9

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  f3950599eb050afe282c46fee597cfc7e4a72e4967f02014f77486aeb5beb6d1N
- Size
  
  89KB
- MD5
  
  9a358d41e5ef8bf9d0c9dbd12a166b60
- SHA1
  
  ce805212f5f2432fb7966fee5fedeb2f6aebc3db
- SHA256
  
  f3950599eb050afe282c46fee597cfc7e4a72e4967f02014f77486aeb5beb6d1
- SHA512
  
  96c189ada8508b92a9840e88618fe1d5c83ae78f04ac19627ef6c2195c03a9a221570a811449fc86f3054cc370103d9c29dab309dd1ddef63d281de9ddec42ad
- SSDEEP
  
  768:Qvw9816vhKQLrou4/wQRNrfrunMxVFA3b7glL:YEGh0oul2unMxVS3Hg9
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence