44a27a3a56cc36f203214ca352455b7be5a4b714107b90651513e5b26f542e61 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44a27a3a56cc36f203214ca352455b7be5a4b714107b90651513e5b26f542e61N
Size

48KB
Sample

240927-wk3v8swbjc
MD5

41a1e02bcd05de4d26daf8c295b90c10
SHA1

581ef8d6b28ee48681ba0ee4597db86b3ca990da
SHA256

44a27a3a56cc36f203214ca352455b7be5a4b714107b90651513e5b26f542e61
SHA512

e95cb3578e00407e7a61c48a08b9eecdd26951b45465c6b90beaafdbf5ce6b90eb6ee27bb7d24f0d6565e6c1e1376ecc42892aa87d48928541aae1d2c5eac580
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIx:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVX

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  44a27a3a56cc36f203214ca352455b7be5a4b714107b90651513e5b26f542e61N
- Size
  
  48KB
- MD5
  
  41a1e02bcd05de4d26daf8c295b90c10
- SHA1
  
  581ef8d6b28ee48681ba0ee4597db86b3ca990da
- SHA256
  
  44a27a3a56cc36f203214ca352455b7be5a4b714107b90651513e5b26f542e61
- SHA512
  
  e95cb3578e00407e7a61c48a08b9eecdd26951b45465c6b90beaafdbf5ce6b90eb6ee27bb7d24f0d6565e6c1e1376ecc42892aa87d48928541aae1d2c5eac580
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIx:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVX
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence