b9de377523e8cfbc8010be41b02c17794ec55ac219e676780ae28e9ebac5ae97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9de377523e8cfbc8010be41b02c17794ec55ac219e676780ae28e9ebac5ae97N
Size

89KB
Sample

241001-llvk5swgna
MD5

4b5e30781359333f2713fca8e87fb690
SHA1

409ac1ba0e4471d0fbf6847a7f8a09212c3c2f23
SHA256

b9de377523e8cfbc8010be41b02c17794ec55ac219e676780ae28e9ebac5ae97
SHA512

69bfa7b7bb01a49d9bdf41c1229bbb02d1565623ee46607d4109910fbd5ab86b608f9b22b2293c0759ad43530085020dfa70f6cf49d6b9b7c8af9c26274577cb
SSDEEP

768:Qvw9816vhKQLros4/wQRNrfrunMxVFA3b7glL:YEGh0osl2unMxVS3Hg9

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b9de377523e8cfbc8010be41b02c17794ec55ac219e676780ae28e9ebac5ae97N
- Size
  
  89KB
- MD5
  
  4b5e30781359333f2713fca8e87fb690
- SHA1
  
  409ac1ba0e4471d0fbf6847a7f8a09212c3c2f23
- SHA256
  
  b9de377523e8cfbc8010be41b02c17794ec55ac219e676780ae28e9ebac5ae97
- SHA512
  
  69bfa7b7bb01a49d9bdf41c1229bbb02d1565623ee46607d4109910fbd5ab86b608f9b22b2293c0759ad43530085020dfa70f6cf49d6b9b7c8af9c26274577cb
- SSDEEP
  
  768:Qvw9816vhKQLros4/wQRNrfrunMxVFA3b7glL:YEGh0osl2unMxVS3Hg9
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence