6abdb4d1fc6cd24676e1a342bb05eed786d6c0d49d2332b3e77246dc48295293 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6abdb4d1fc6cd24676e1a342bb05eed786d6c0d49d2332b3e77246dc48295293N
Size

66KB
Sample

241002-py935s1akd
MD5

d94961906d52dd20127d11cd2482e280
SHA1

86f55587a704052e903c8f2c545ee82ef12665ba
SHA256

6abdb4d1fc6cd24676e1a342bb05eed786d6c0d49d2332b3e77246dc48295293
SHA512

78061034b93b3a2cc987dca932123ec32b7a76c6bb7442e5a0c873c5c893828b7a1c067344ea330fa134ef79ed349dfdf19e6f774829a8ad48a0218e47cf277b
SSDEEP

1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAjU+EmkcU+uZd7ZYhc:lAo1lOwvlKlXBP6vghzwYu7vih9GueI6

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6abdb4d1fc6cd24676e1a342bb05eed786d6c0d49d2332b3e77246dc48295293N
- Size
  
  66KB
- MD5
  
  d94961906d52dd20127d11cd2482e280
- SHA1
  
  86f55587a704052e903c8f2c545ee82ef12665ba
- SHA256
  
  6abdb4d1fc6cd24676e1a342bb05eed786d6c0d49d2332b3e77246dc48295293
- SHA512
  
  78061034b93b3a2cc987dca932123ec32b7a76c6bb7442e5a0c873c5c893828b7a1c067344ea330fa134ef79ed349dfdf19e6f774829a8ad48a0218e47cf277b
- SSDEEP
  
  1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAjU+EmkcU+uZd7ZYhc:lAo1lOwvlKlXBP6vghzwYu7vih9GueI6
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence