5b21262ebb0b926d8093bb41064b77c17efc7104f9cd8a430bb257b069806d95 | Triage

Sharing

General

Target

5b21262ebb0b926d8093bb41064b77c17efc7104f9cd8a430bb257b069806d95N
Size

52KB
Sample

241002-r2ykma1gpm
MD5

6126ae83340aff64aa68f2297dacc860
SHA1

0aab2626102cbf1ce97843848cf9f515cf808415
SHA256

5b21262ebb0b926d8093bb41064b77c17efc7104f9cd8a430bb257b069806d95
SHA512

ee2500217b776503273a91774dc0e096dbc1c708e601ca9993a1543936faecfc7dd744b7d8dd1dba3488610e967397668efc2d8648f753c603d685f2086bfe3b
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIO:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVc

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  5b21262ebb0b926d8093bb41064b77c17efc7104f9cd8a430bb257b069806d95N
- Size
  
  52KB
- MD5
  
  6126ae83340aff64aa68f2297dacc860
- SHA1
  
  0aab2626102cbf1ce97843848cf9f515cf808415
- SHA256
  
  5b21262ebb0b926d8093bb41064b77c17efc7104f9cd8a430bb257b069806d95
- SHA512
  
  ee2500217b776503273a91774dc0e096dbc1c708e601ca9993a1543936faecfc7dd744b7d8dd1dba3488610e967397668efc2d8648f753c603d685f2086bfe3b
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIO:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVc
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence