68bcce4c79ec61095108105ccc7a1b103da6ad7236305c55b49e50932049bb8f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68bcce4c79ec61095108105ccc7a1b103da6ad7236305c55b49e50932049bb8fN
Size

66KB
Sample

240921-nfd3bazapa
MD5

81a73c2e73f416a0a80a201a26af0d10
SHA1

0045833eba8a70a0156351412f6c08d579051350
SHA256

68bcce4c79ec61095108105ccc7a1b103da6ad7236305c55b49e50932049bb8f
SHA512

0565c92e80581864a4c24852b5c4cf73d5ef7ea76be65c02871782f8e4479a7a1eb0e26f93fd4fd0acdaf3b119ceb56980bf53949f7fc95a1d52a00a28caa7a6
SSDEEP

1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hys:lAo1lOwvlKlXBP6vghzwYu7vih9GueIF

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  68bcce4c79ec61095108105ccc7a1b103da6ad7236305c55b49e50932049bb8fN
- Size
  
  66KB
- MD5
  
  81a73c2e73f416a0a80a201a26af0d10
- SHA1
  
  0045833eba8a70a0156351412f6c08d579051350
- SHA256
  
  68bcce4c79ec61095108105ccc7a1b103da6ad7236305c55b49e50932049bb8f
- SHA512
  
  0565c92e80581864a4c24852b5c4cf73d5ef7ea76be65c02871782f8e4479a7a1eb0e26f93fd4fd0acdaf3b119ceb56980bf53949f7fc95a1d52a00a28caa7a6
- SSDEEP
  
  1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hys:lAo1lOwvlKlXBP6vghzwYu7vih9GueIF
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence