3c5fbe7807dfb60a0acdafda5dd3ffd12895e1615981a7714d98e37dfcf15780 | Triage

Sharing

General

Target

3c5fbe7807dfb60a0acdafda5dd3ffd12895e1615981a7714d98e37dfcf15780N
Size

201KB
Sample

241002-bqgvqstepe
MD5

dd0cf90550045d42ace823f8e773ee50
SHA1

90f5c745503cce184a04c95aa07762fb9e42564e
SHA256

3c5fbe7807dfb60a0acdafda5dd3ffd12895e1615981a7714d98e37dfcf15780
SHA512

69be238be187b3116c9d2f9adf6d5e3659bdcbbd3d10393e5b538ebbce7b8e432721c5577aad3f36d5a1ced905983fd365063beb512d4afa73d9f39fe26919cc
SSDEEP

3072:Bih0fMFfugUVg+/to3AbyaTzEfKi9Rv2PNpWJJpO3+KwIZxoUVVZWKbLqvTb+:0h0fUWgUVBWwWOErvEeof5ZzVeKPaTb+

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  3c5fbe7807dfb60a0acdafda5dd3ffd12895e1615981a7714d98e37dfcf15780N
- Size
  
  201KB
- MD5
  
  dd0cf90550045d42ace823f8e773ee50
- SHA1
  
  90f5c745503cce184a04c95aa07762fb9e42564e
- SHA256
  
  3c5fbe7807dfb60a0acdafda5dd3ffd12895e1615981a7714d98e37dfcf15780
- SHA512
  
  69be238be187b3116c9d2f9adf6d5e3659bdcbbd3d10393e5b538ebbce7b8e432721c5577aad3f36d5a1ced905983fd365063beb512d4afa73d9f39fe26919cc
- SSDEEP
  
  3072:Bih0fMFfugUVg+/to3AbyaTzEfKi9Rv2PNpWJJpO3+KwIZxoUVVZWKbLqvTb+:0h0fUWgUVBWwWOErvEeof5ZzVeKPaTb+
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation