494e51e12c60246920aedaab31d7e6926309e7987bc3473a0b4acec765a0f791 | Triage

Sharing

General

Target

494e51e12c60246920aedaab31d7e6926309e7987bc3473a0b4acec765a0f791N
Size

55KB
Sample

240927-gqgsma1eqc
MD5

88074bc801e47d21e1654645eb0b21c0
SHA1

3c541d274e6196852f4015fb48e0619b805333e1
SHA256

494e51e12c60246920aedaab31d7e6926309e7987bc3473a0b4acec765a0f791
SHA512

17791ca54f3f713588853d035d2e371a5b94ea786b05d360b45e48bda8dbc75653d017c0db7360a3bf336ee76a02f3673c362ca1eabeea61d780f12a53932572
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIp:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVT

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  494e51e12c60246920aedaab31d7e6926309e7987bc3473a0b4acec765a0f791N
- Size
  
  55KB
- MD5
  
  88074bc801e47d21e1654645eb0b21c0
- SHA1
  
  3c541d274e6196852f4015fb48e0619b805333e1
- SHA256
  
  494e51e12c60246920aedaab31d7e6926309e7987bc3473a0b4acec765a0f791
- SHA512
  
  17791ca54f3f713588853d035d2e371a5b94ea786b05d360b45e48bda8dbc75653d017c0db7360a3bf336ee76a02f3673c362ca1eabeea61d780f12a53932572
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIp:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVT
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence