deb93be0cdab5b8704fd39a8ebc06f1ad37680dea37f64a110e465b8dd9723e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

deb93be0cdab5b8704fd39a8ebc06f1ad37680dea37f64a110e465b8dd9723e1
Size

54KB
Sample

240928-dcymfatarq
MD5

9b243826fcba95ae1b6f195384af607b
SHA1

9c32d037396d2ee1c265fcb4de9ec026f4e4f51a
SHA256

deb93be0cdab5b8704fd39a8ebc06f1ad37680dea37f64a110e465b8dd9723e1
SHA512

bf4906eed94631c7312f703fe19fc257a049ddb01505a80b40353ef0c4a5b50bb49ddac730f0f0201e598668069279b60a4d9447825ceadd001b1442a88ddb33
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIz:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVV

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  deb93be0cdab5b8704fd39a8ebc06f1ad37680dea37f64a110e465b8dd9723e1
- Size
  
  54KB
- MD5
  
  9b243826fcba95ae1b6f195384af607b
- SHA1
  
  9c32d037396d2ee1c265fcb4de9ec026f4e4f51a
- SHA256
  
  deb93be0cdab5b8704fd39a8ebc06f1ad37680dea37f64a110e465b8dd9723e1
- SHA512
  
  bf4906eed94631c7312f703fe19fc257a049ddb01505a80b40353ef0c4a5b50bb49ddac730f0f0201e598668069279b60a4d9447825ceadd001b1442a88ddb33
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIz:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVV
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence