566e0cfb17926cc39997defbe39f65d9fb805c17ce3dc698f019f06c98e6d47c | Triage

Sharing

General

Target

566e0cfb17926cc39997defbe39f65d9fb805c17ce3dc698f019f06c98e6d47cN.exe
Size

50KB
Sample

240925-x8fahswhla
MD5

55265d45502dbca5cd698f50e70ad750
SHA1

90aa5685bd325b2d7aa48a3050102e3516299d2a
SHA256

566e0cfb17926cc39997defbe39f65d9fb805c17ce3dc698f019f06c98e6d47c
SHA512

e0c14d59193fc848fe8f3c5c8bc98e7be7e45e3788e2888dd10c143f2273f3e420148da4289bffcff1b78b6ee4a402f4302c746bc7dd470a9d653a7adf6e1d29
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIP:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVd

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  566e0cfb17926cc39997defbe39f65d9fb805c17ce3dc698f019f06c98e6d47cN.exe
- Size
  
  50KB
- MD5
  
  55265d45502dbca5cd698f50e70ad750
- SHA1
  
  90aa5685bd325b2d7aa48a3050102e3516299d2a
- SHA256
  
  566e0cfb17926cc39997defbe39f65d9fb805c17ce3dc698f019f06c98e6d47c
- SHA512
  
  e0c14d59193fc848fe8f3c5c8bc98e7be7e45e3788e2888dd10c143f2273f3e420148da4289bffcff1b78b6ee4a402f4302c746bc7dd470a9d653a7adf6e1d29
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIP:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVd
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence