41014688ff73b6a44df2b5e6807c40edcebe1474ad17db3fccb03e985b35f3ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41014688ff73b6a44df2b5e6807c40edcebe1474ad17db3fccb03e985b35f3eeN
Size

42KB
Sample

241003-cnmhwazakp
MD5

5d1ad6766f0f7ecd03e39d6e24445df0
SHA1

bbcc354d293edef7b1682fe267b5c60fe1b9e6b4
SHA256

41014688ff73b6a44df2b5e6807c40edcebe1474ad17db3fccb03e985b35f3ee
SHA512

765f54cede9dd2ba854e254a9e595f27d53a8e963da51790e478daff3fd866503eef36f0b3cc2d7e6b62b6f85903a7e4869da559a72c7313ccf540fd9c3d61c7
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6I2:e6q10k0EFjed6rqJ+6vghzwYu7vih9GS

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  41014688ff73b6a44df2b5e6807c40edcebe1474ad17db3fccb03e985b35f3eeN
- Size
  
  42KB
- MD5
  
  5d1ad6766f0f7ecd03e39d6e24445df0
- SHA1
  
  bbcc354d293edef7b1682fe267b5c60fe1b9e6b4
- SHA256
  
  41014688ff73b6a44df2b5e6807c40edcebe1474ad17db3fccb03e985b35f3ee
- SHA512
  
  765f54cede9dd2ba854e254a9e595f27d53a8e963da51790e478daff3fd866503eef36f0b3cc2d7e6b62b6f85903a7e4869da559a72c7313ccf540fd9c3d61c7
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAjU+Eh6I2:e6q10k0EFjed6rqJ+6vghzwYu7vih9GS
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence