263b5941626c7d5a9f59f7bd64b0ee92c6e7810aaa73dd1d8cf98d812b31d989 | Triage

Sharing

General

Target

263b5941626c7d5a9f59f7bd64b0ee92c6e7810aaa73dd1d8cf98d812b31d989N
Size

40KB
Sample

240927-dta8gavhmc
MD5

b9c6e92dc5f721ea219045cd72f92020
SHA1

ae26de478510b45352b67ef60d2597f67ecc213e
SHA256

263b5941626c7d5a9f59f7bd64b0ee92c6e7810aaa73dd1d8cf98d812b31d989
SHA512

553860e0bb387f635250910df57581b8a105a60bde95e5358fba0370342afe0038961518d4ba99f706db533976d66968a54fc9a2ed437e8f69fff8cb40a18081
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IR:e6q10k0EFjed6rqJ+6vghzwYu7vih9G1

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  263b5941626c7d5a9f59f7bd64b0ee92c6e7810aaa73dd1d8cf98d812b31d989N
- Size
  
  40KB
- MD5
  
  b9c6e92dc5f721ea219045cd72f92020
- SHA1
  
  ae26de478510b45352b67ef60d2597f67ecc213e
- SHA256
  
  263b5941626c7d5a9f59f7bd64b0ee92c6e7810aaa73dd1d8cf98d812b31d989
- SHA512
  
  553860e0bb387f635250910df57581b8a105a60bde95e5358fba0370342afe0038961518d4ba99f706db533976d66968a54fc9a2ed437e8f69fff8cb40a18081
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IR:e6q10k0EFjed6rqJ+6vghzwYu7vih9G1
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence