5a04a9b185272c20ab5b5d19e0fb214c2d0a04ced5cdd57b1c121376a0493405 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a04a9b185272c20ab5b5d19e0fb214c2d0a04ced5cdd57b1c121376a0493405
Size

37KB
Sample

240925-1pv4eazbnl
MD5

1e11d081a40eca29d5e5f1d95230c771
SHA1

16f08e8274c3e3ec118261c3d376fb7537304ba1
SHA256

5a04a9b185272c20ab5b5d19e0fb214c2d0a04ced5cdd57b1c121376a0493405
SHA512

04a47077f03073fe5eee8145030d4a7cac1d2abbc13e288d8b8952ee5c97d31d2d0a9f12dbb39a2c0ecd6d235ea482d220ac3717eff80ca1e6a097a6fed2916d
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhT:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYz

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  5a04a9b185272c20ab5b5d19e0fb214c2d0a04ced5cdd57b1c121376a0493405
- Size
  
  37KB
- MD5
  
  1e11d081a40eca29d5e5f1d95230c771
- SHA1
  
  16f08e8274c3e3ec118261c3d376fb7537304ba1
- SHA256
  
  5a04a9b185272c20ab5b5d19e0fb214c2d0a04ced5cdd57b1c121376a0493405
- SHA512
  
  04a47077f03073fe5eee8145030d4a7cac1d2abbc13e288d8b8952ee5c97d31d2d0a9f12dbb39a2c0ecd6d235ea482d220ac3717eff80ca1e6a097a6fed2916d
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhT:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYz
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence