90f693ee2e64fd5266fec4f9c8982a5fbe1028d3892349e49216815d6fc5ea5f | Triage

Sharing

General

Target

90f693ee2e64fd5266fec4f9c8982a5fbe1028d3892349e49216815d6fc5ea5f
Size

129KB
Sample

240925-3yr48axhrf
MD5

c80468c19fe3842ad3d2c10e51279869
SHA1

d75b46d7a7febd7a9d00583f64d78c17a35dc15b
SHA256

90f693ee2e64fd5266fec4f9c8982a5fbe1028d3892349e49216815d6fc5ea5f
SHA512

765c85663af2396821256916466d996f6bbf974a95a4c9644c17d2838ecf2e9712b78f0f89c55ec62c9be35ea80e6bedc4f8b484e5f26a13daaba80ecb8209c7
SSDEEP

3072:knZjfso0f5z9f57fgDWChiOzl0LEnFvUf4FnWRYCdF:kndp0f5z77fgDNlzl0L0dUf2WRNdF

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  90f693ee2e64fd5266fec4f9c8982a5fbe1028d3892349e49216815d6fc5ea5f
- Size
  
  129KB
- MD5
  
  c80468c19fe3842ad3d2c10e51279869
- SHA1
  
  d75b46d7a7febd7a9d00583f64d78c17a35dc15b
- SHA256
  
  90f693ee2e64fd5266fec4f9c8982a5fbe1028d3892349e49216815d6fc5ea5f
- SHA512
  
  765c85663af2396821256916466d996f6bbf974a95a4c9644c17d2838ecf2e9712b78f0f89c55ec62c9be35ea80e6bedc4f8b484e5f26a13daaba80ecb8209c7
- SSDEEP
  
  3072:knZjfso0f5z9f57fgDWChiOzl0LEnFvUf4FnWRYCdF:kndp0f5z77fgDNlzl0L0dUf2WRNdF
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation