236fb83dcfc1d59827c290957f49cd16290618a9a5810aab5c747aa48638e341 | Triage

Sharing

General

Target

236fb83dcfc1d59827c290957f49cd16290618a9a5810aab5c747aa48638e341
Size

57KB
Sample

240928-yeyenswcqh
MD5

6098a4053bb091373de48d98916d2951
SHA1

b4685e7661d642efdd32a960c356f3ee0a9f64c0
SHA256

236fb83dcfc1d59827c290957f49cd16290618a9a5810aab5c747aa48638e341
SHA512

a0be9f5f060eb354f8dc1c66089eb782668b8c515d87785d78693f08592c331653b680b27f212c08b3f93db7cf27f7d79aa456fb29459f94fd3cb199e7d2cc30
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI/:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVN

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  236fb83dcfc1d59827c290957f49cd16290618a9a5810aab5c747aa48638e341
- Size
  
  57KB
- MD5
  
  6098a4053bb091373de48d98916d2951
- SHA1
  
  b4685e7661d642efdd32a960c356f3ee0a9f64c0
- SHA256
  
  236fb83dcfc1d59827c290957f49cd16290618a9a5810aab5c747aa48638e341
- SHA512
  
  a0be9f5f060eb354f8dc1c66089eb782668b8c515d87785d78693f08592c331653b680b27f212c08b3f93db7cf27f7d79aa456fb29459f94fd3cb199e7d2cc30
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI/:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVN
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence