63b5365d4a85f8497b085840c3b7c12cec432f7a67fd4edfddee79d0b2515927 | Triage

Sharing

General

Target

63b5365d4a85f8497b085840c3b7c12cec432f7a67fd4edfddee79d0b2515927N
Size

45KB
Sample

240921-vbellsshqq
MD5

6a554f79344104a37fc6cf808c357cf0
SHA1

24d9754874d077c294f63c85a5d57fe3d9cd3c6b
SHA256

63b5365d4a85f8497b085840c3b7c12cec432f7a67fd4edfddee79d0b2515927
SHA512

cc57b4f9ac54468a6199a3fca7fe6cd8255ff5814385622659648a6cfa1b882c554e36b6969f811705faccca8ca31fdd5a12872ff6363af2155d9c71dc6f0d0f
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhX:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY3

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  63b5365d4a85f8497b085840c3b7c12cec432f7a67fd4edfddee79d0b2515927N
- Size
  
  45KB
- MD5
  
  6a554f79344104a37fc6cf808c357cf0
- SHA1
  
  24d9754874d077c294f63c85a5d57fe3d9cd3c6b
- SHA256
  
  63b5365d4a85f8497b085840c3b7c12cec432f7a67fd4edfddee79d0b2515927
- SHA512
  
  cc57b4f9ac54468a6199a3fca7fe6cd8255ff5814385622659648a6cfa1b882c554e36b6969f811705faccca8ca31fdd5a12872ff6363af2155d9c71dc6f0d0f
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhX:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wY3
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence