29d0baf107b2218698e558555f01f629fa2000fe2447d1a60389dcefaa02f755 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29d0baf107b2218698e558555f01f629fa2000fe2447d1a60389dcefaa02f755N
Size

56KB
Sample

241001-b6q4cavdlr
MD5

b21c8203f1f4a96e238033b69910d310
SHA1

e24962565e9a787e56c1a8160881f3db22e2b9ca
SHA256

29d0baf107b2218698e558555f01f629fa2000fe2447d1a60389dcefaa02f755
SHA512

ed9db2b25bcec0626575ac4f1c31f600d8519e7dbdf9a79848622a81edb4034b9c44cf7c6bdee2c0435892914a5579b36e366f28c860e0da750793755c4c94d9
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI5:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVP

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  29d0baf107b2218698e558555f01f629fa2000fe2447d1a60389dcefaa02f755N
- Size
  
  56KB
- MD5
  
  b21c8203f1f4a96e238033b69910d310
- SHA1
  
  e24962565e9a787e56c1a8160881f3db22e2b9ca
- SHA256
  
  29d0baf107b2218698e558555f01f629fa2000fe2447d1a60389dcefaa02f755
- SHA512
  
  ed9db2b25bcec0626575ac4f1c31f600d8519e7dbdf9a79848622a81edb4034b9c44cf7c6bdee2c0435892914a5579b36e366f28c860e0da750793755c4c94d9
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI5:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVP
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence