d7302fa9a0b4031a5039d9ddd6a429074d6a70a67568de52a5a09bbf5f347917 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7302fa9a0b4031a5039d9ddd6a429074d6a70a67568de52a5a09bbf5f347917N
Size

76KB
Sample

241001-e4c1gsvcnb
MD5

c0bbea8938e764cbb20ae83a8141ac80
SHA1

59b4ec71af8b97b353034f0f2b4fec0b68f33104
SHA256

d7302fa9a0b4031a5039d9ddd6a429074d6a70a67568de52a5a09bbf5f347917
SHA512

e69ebf8e88f4d8a99f43fa1f930dce8e0c92120d21ab17dcda60aa66ca8d8b35031d90718ca6ef9e00042ee22d0ac790d90a61a7e2a82dd65e71acbde23b8169
SSDEEP

1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvPHG3GvUhCHi1X5GoOvmHOD:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhAZ

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d7302fa9a0b4031a5039d9ddd6a429074d6a70a67568de52a5a09bbf5f347917N
- Size
  
  76KB
- MD5
  
  c0bbea8938e764cbb20ae83a8141ac80
- SHA1
  
  59b4ec71af8b97b353034f0f2b4fec0b68f33104
- SHA256
  
  d7302fa9a0b4031a5039d9ddd6a429074d6a70a67568de52a5a09bbf5f347917
- SHA512
  
  e69ebf8e88f4d8a99f43fa1f930dce8e0c92120d21ab17dcda60aa66ca8d8b35031d90718ca6ef9e00042ee22d0ac790d90a61a7e2a82dd65e71acbde23b8169
- SSDEEP
  
  1536:86RAo0ej2d6rnJwwvlNlIUBvsI7hrhEh9cpDN/qhAvPHG3GvUhCHi1X5GoOvmHOD:xAo1lOwvlNlXBvsI7hrhEh9cpDN/qhAZ
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence