4a98c5440d41c37976ea1c316a0e48734a59f9a9ab6e4d18bdbd0e5af6fc52f3 | Triage

Sharing

General

Target

4a98c5440d41c37976ea1c316a0e48734a59f9a9ab6e4d18bdbd0e5af6fc52f3N
Size

62KB
Sample

240930-wxf71ayfmq
MD5

b18fc8d914b3da6e59ffd53163e9edf0
SHA1

74f463317e9664039da639e3f100a801a8fb6093
SHA256

4a98c5440d41c37976ea1c316a0e48734a59f9a9ab6e4d18bdbd0e5af6fc52f3
SHA512

57022cab2b31ea00204467eed87dbf7d86be0667299c0a50334a412675b0114b52f709fb6a4a3db81848268dd654b30a949b4cb6517301a51de254df6e372b51
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI2:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVI

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  4a98c5440d41c37976ea1c316a0e48734a59f9a9ab6e4d18bdbd0e5af6fc52f3N
- Size
  
  62KB
- MD5
  
  b18fc8d914b3da6e59ffd53163e9edf0
- SHA1
  
  74f463317e9664039da639e3f100a801a8fb6093
- SHA256
  
  4a98c5440d41c37976ea1c316a0e48734a59f9a9ab6e4d18bdbd0e5af6fc52f3
- SHA512
  
  57022cab2b31ea00204467eed87dbf7d86be0667299c0a50334a412675b0114b52f709fb6a4a3db81848268dd654b30a949b4cb6517301a51de254df6e372b51
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI2:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVI
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence