125e6e99c74dcbc25219b67b095c817216a4ce8c8eb1c0c3d5c06238cf47ff7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

125e6e99c74dcbc25219b67b095c817216a4ce8c8eb1c0c3d5c06238cf47ff7a
Size

40KB
Sample

240921-xeasyaxdje
MD5

7baa8412e99b3552db21b03c09cfafe8
SHA1

1a43f048e56347110ee627282df21c314496da7f
SHA256

125e6e99c74dcbc25219b67b095c817216a4ce8c8eb1c0c3d5c06238cf47ff7a
SHA512

15395f92e1e344cba64bd01ded2de22c7f83f5bd27e996d9658c75f7a8b8c30032bee90e421fffdeeae4450bbc7fc0a0011e259d698edd00b6394b479608b03c
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6v8tvGE9UHrSdghj8bvHRIkhbUIchUh8h:e6q10k0EFjed6rqJ+6v8tvGE9UHrSdg7

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  125e6e99c74dcbc25219b67b095c817216a4ce8c8eb1c0c3d5c06238cf47ff7a
- Size
  
  40KB
- MD5
  
  7baa8412e99b3552db21b03c09cfafe8
- SHA1
  
  1a43f048e56347110ee627282df21c314496da7f
- SHA256
  
  125e6e99c74dcbc25219b67b095c817216a4ce8c8eb1c0c3d5c06238cf47ff7a
- SHA512
  
  15395f92e1e344cba64bd01ded2de22c7f83f5bd27e996d9658c75f7a8b8c30032bee90e421fffdeeae4450bbc7fc0a0011e259d698edd00b6394b479608b03c
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6v8tvGE9UHrSdghj8bvHRIkhbUIchUh8h:e6q10k0EFjed6rqJ+6v8tvGE9UHrSdg7
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence