6dc08c7bcebedf59e606cb39531b08f385c2295c0e1923c87c6b4c6c6c9cde26 | Triage

Sharing

General

Target

6dc08c7bcebedf59e606cb39531b08f385c2295c0e1923c87c6b4c6c6c9cde26N
Size

8KB
Sample

240928-rysvza1apk
MD5

e8d2997f0a8e0f3ef5df4a90cc427120
SHA1

6be9c7f177a0d130fc6f0f1fa43ce27eea08dd61
SHA256

6dc08c7bcebedf59e606cb39531b08f385c2295c0e1923c87c6b4c6c6c9cde26
SHA512

2ee378ffdd6037725463ea8ada639c74ef47a47ab09f8857bc188a9ebfd086aea1d761d22a6aca1e8d9e01f675b683f130a6f34393cad11217d7c85e85425701
SSDEEP

192:ph4SFyvWohE5xf6YUBSL63SUJqtMblWN:pO+ohE2B13NJqtM

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6dc08c7bcebedf59e606cb39531b08f385c2295c0e1923c87c6b4c6c6c9cde26N
- Size
  
  8KB
- MD5
  
  e8d2997f0a8e0f3ef5df4a90cc427120
- SHA1
  
  6be9c7f177a0d130fc6f0f1fa43ce27eea08dd61
- SHA256
  
  6dc08c7bcebedf59e606cb39531b08f385c2295c0e1923c87c6b4c6c6c9cde26
- SHA512
  
  2ee378ffdd6037725463ea8ada639c74ef47a47ab09f8857bc188a9ebfd086aea1d761d22a6aca1e8d9e01f675b683f130a6f34393cad11217d7c85e85425701
- SSDEEP
  
  192:ph4SFyvWohE5xf6YUBSL63SUJqtMblWN:pO+ohE2B13NJqtM
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence