e12c0fd963cbd6d4b72440575a27fb3edd0efc7de73e50b6e6d998eaa988fced | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e12c0fd963cbd6d4b72440575a27fb3edd0efc7de73e50b6e6d998eaa988fcedN
Size

40KB
Sample

241002-mbpgta1arq
MD5

ca196188dfee298c1db544632c3c7400
SHA1

0eac2aa55462db24d6b414aaa9e98388d830add5
SHA256

e12c0fd963cbd6d4b72440575a27fb3edd0efc7de73e50b6e6d998eaa988fced
SHA512

8fdc04ab8cd0d936ce7a2cb1df5ef598de79a7913eeec112e411af9d6cc83d425d8a981d7064ad5a4c2e7de0613b7d3b0579332e8f536349edd4c95088cfe759
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6ID:e6q10k0EFjed6rqJ+6vghzwYu7vih9G/

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e12c0fd963cbd6d4b72440575a27fb3edd0efc7de73e50b6e6d998eaa988fcedN
- Size
  
  40KB
- MD5
  
  ca196188dfee298c1db544632c3c7400
- SHA1
  
  0eac2aa55462db24d6b414aaa9e98388d830add5
- SHA256
  
  e12c0fd963cbd6d4b72440575a27fb3edd0efc7de73e50b6e6d998eaa988fced
- SHA512
  
  8fdc04ab8cd0d936ce7a2cb1df5ef598de79a7913eeec112e411af9d6cc83d425d8a981d7064ad5a4c2e7de0613b7d3b0579332e8f536349edd4c95088cfe759
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6ID:e6q10k0EFjed6rqJ+6vghzwYu7vih9G/
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence