8b5572bd0a7f8a323893cfaffa8dec5b904ef94c24b1e8636659d2eba472ddc0 | Triage

Sharing

General

Target

8b5572bd0a7f8a323893cfaffa8dec5b904ef94c24b1e8636659d2eba472ddc0.exe
Size

81KB
Sample

241002-bs2mxstfrd
MD5

31207e0a3811ea7b73b8c28719fa2d45
SHA1

d5269231a3bb92a70cead4651a18cd30f32d3449
SHA256

8b5572bd0a7f8a323893cfaffa8dec5b904ef94c24b1e8636659d2eba472ddc0
SHA512

2b2b454516b68a0af9c3f9080048ebeae78f592d2926d270b11fcfd7eef8592e422c83ac3c16ae9dfded7c9448c3459f3431160931cd662d0d3b0b138007234a
SSDEEP

1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYD7UxD2c:renkyfPAwiMq0RqRfbaxZJYYD7c

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  8b5572bd0a7f8a323893cfaffa8dec5b904ef94c24b1e8636659d2eba472ddc0.exe
- Size
  
  81KB
- MD5
  
  31207e0a3811ea7b73b8c28719fa2d45
- SHA1
  
  d5269231a3bb92a70cead4651a18cd30f32d3449
- SHA256
  
  8b5572bd0a7f8a323893cfaffa8dec5b904ef94c24b1e8636659d2eba472ddc0
- SHA512
  
  2b2b454516b68a0af9c3f9080048ebeae78f592d2926d270b11fcfd7eef8592e422c83ac3c16ae9dfded7c9448c3459f3431160931cd662d0d3b0b138007234a
- SSDEEP
  
  1536:xoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaxPBJYYD7UxD2c:renkyfPAwiMq0RqRfbaxZJYYD7c
Score

8^/10

discovery persistence
- Manipulates Digital Signatures
  Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.
- Sets service image path in registry
  persistence
- Downloads MZ/PE file
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

SIP and Trust Provider Hijacking

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence