4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366 | Triage

Sharing

General

Target

4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366
Size

61KB
Sample

240929-zrenrszfln
MD5

629af6083bc0bed26f3ac090672fd3ea
SHA1

ecf72663c8a4461b6a258927a8edae23d3ac915f
SHA256

4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366
SHA512

d0240f365162462d1deb35737754ba52a0ca049acc7031a4db217cbe8e94ed135a00872da2fb41f19be13f0346677125c461bf3b3118cc8c7a2cb3e730f6357a
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhID:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVd

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366
- Size
  
  61KB
- MD5
  
  629af6083bc0bed26f3ac090672fd3ea
- SHA1
  
  ecf72663c8a4461b6a258927a8edae23d3ac915f
- SHA256
  
  4946b43988503745c6d3232ccf3a843f402cb5ee4b61f10103b616788b961366
- SHA512
  
  d0240f365162462d1deb35737754ba52a0ca049acc7031a4db217cbe8e94ed135a00872da2fb41f19be13f0346677125c461bf3b3118cc8c7a2cb3e730f6357a
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhID:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVd
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence