c9e505b6919b88872c9097c23b183fd15706d82988e69ff3f5a2d01dd62879af | Triage

Sharing

General

Target

c9e505b6919b88872c9097c23b183fd15706d82988e69ff3f5a2d01dd62879af
Size

38KB
Sample

240927-b5fafsyeqj
MD5

4792224a1fda9e36beadde993058f3f8
SHA1

b8eeceffa43080c07b569e7034e63164f9779e9d
SHA256

c9e505b6919b88872c9097c23b183fd15706d82988e69ff3f5a2d01dd62879af
SHA512

07526572d51e0b800436dae99422afe016943c7cc329cfba60d2790a9c922b3c4d50a25a90d87f52b3f457bf0778bbec4f6a8a8978119920f4cc5dbf4dcc0539
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhF:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYl

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  c9e505b6919b88872c9097c23b183fd15706d82988e69ff3f5a2d01dd62879af
- Size
  
  38KB
- MD5
  
  4792224a1fda9e36beadde993058f3f8
- SHA1
  
  b8eeceffa43080c07b569e7034e63164f9779e9d
- SHA256
  
  c9e505b6919b88872c9097c23b183fd15706d82988e69ff3f5a2d01dd62879af
- SHA512
  
  07526572d51e0b800436dae99422afe016943c7cc329cfba60d2790a9c922b3c4d50a25a90d87f52b3f457bf0778bbec4f6a8a8978119920f4cc5dbf4dcc0539
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhF:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYl
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence