bcf5ad98a0abdc364ab12eb8d6f45d8a2db7f6938ea7ee41db261415393a97c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcf5ad98a0abdc364ab12eb8d6f45d8a2db7f6938ea7ee41db261415393a97c9N
Size

45KB
Sample

240927-c6b5vstgjb
MD5

92f4653e37152750cc4cc5a1789ea540
SHA1

6c2383b49ce491b0eb559b17866874996dc12699
SHA256

bcf5ad98a0abdc364ab12eb8d6f45d8a2db7f6938ea7ee41db261415393a97c9
SHA512

f8009b34b4bc1d642e67c05d8c978fbf9dc0ffe9315164cc846cf76265f3db95402923b3ccbbe0147b4e7dee1fa6ca1b4ef90656a2f6ddc1c951352daf568b47
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Emkct:e6q10k0EFjed6rqJ+6vghzwYu7vih9GU

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  bcf5ad98a0abdc364ab12eb8d6f45d8a2db7f6938ea7ee41db261415393a97c9N
- Size
  
  45KB
- MD5
  
  92f4653e37152750cc4cc5a1789ea540
- SHA1
  
  6c2383b49ce491b0eb559b17866874996dc12699
- SHA256
  
  bcf5ad98a0abdc364ab12eb8d6f45d8a2db7f6938ea7ee41db261415393a97c9
- SHA512
  
  f8009b34b4bc1d642e67c05d8c978fbf9dc0ffe9315164cc846cf76265f3db95402923b3ccbbe0147b4e7dee1fa6ca1b4ef90656a2f6ddc1c951352daf568b47
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Emkct:e6q10k0EFjed6rqJ+6vghzwYu7vih9GU
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence