91ac823e9235c8cd7ae7b514098cff348e85c629f77191bfc0d92362ae789d25 | Triage

Sharing

General

Target

91ac823e9235c8cd7ae7b514098cff348e85c629f77191bfc0d92362ae789d25N
Size

51KB
Sample

240930-mbz9bazbmp
MD5

424488cc9ab0481bbc28fa1d190e28b0
SHA1

31d51ce5c58f981540937315228716645bd79035
SHA256

91ac823e9235c8cd7ae7b514098cff348e85c629f77191bfc0d92362ae789d25
SHA512

929c1b89a6dc05f24c535b865ba5201f4251e8ba7e9b3afe8b9de968579f86542a74a32a8dc4815e7e435d874e469034cc720a97c62f7938c305fec785ba90df
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI0:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVS

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  91ac823e9235c8cd7ae7b514098cff348e85c629f77191bfc0d92362ae789d25N
- Size
  
  51KB
- MD5
  
  424488cc9ab0481bbc28fa1d190e28b0
- SHA1
  
  31d51ce5c58f981540937315228716645bd79035
- SHA256
  
  91ac823e9235c8cd7ae7b514098cff348e85c629f77191bfc0d92362ae789d25
- SHA512
  
  929c1b89a6dc05f24c535b865ba5201f4251e8ba7e9b3afe8b9de968579f86542a74a32a8dc4815e7e435d874e469034cc720a97c62f7938c305fec785ba90df
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI0:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVS
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence