0396b80186d17b24eb4cac69e7bac385ea2c4b94cd92c2bb477083acb5c22119 | Triage

Sharing

General

Target

0396b80186d17b24eb4cac69e7bac385ea2c4b94cd92c2bb477083acb5c22119N
Size

52KB
Sample

240928-wwsjmszakk
MD5

0413542264808e92622498643bdfb140
SHA1

9444d6c50b0b63883202b296bc9b05acd185748b
SHA256

0396b80186d17b24eb4cac69e7bac385ea2c4b94cd92c2bb477083acb5c22119
SHA512

17cf8489477427ec8dfd30eacae0ebc7546093a4014287be057ce68f97fbead0f916f32100b9a5f5d746b756709e84dd869807830b1d2ff6136d08a6b9d0a7e1
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIB:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVH

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  0396b80186d17b24eb4cac69e7bac385ea2c4b94cd92c2bb477083acb5c22119N
- Size
  
  52KB
- MD5
  
  0413542264808e92622498643bdfb140
- SHA1
  
  9444d6c50b0b63883202b296bc9b05acd185748b
- SHA256
  
  0396b80186d17b24eb4cac69e7bac385ea2c4b94cd92c2bb477083acb5c22119
- SHA512
  
  17cf8489477427ec8dfd30eacae0ebc7546093a4014287be057ce68f97fbead0f916f32100b9a5f5d746b756709e84dd869807830b1d2ff6136d08a6b9d0a7e1
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIB:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVH
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence