2ec2a7d5f68c292d456c6f4fd26feb28a23abc9de5a131dd9fdd255540fc2700 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ec2a7d5f68c292d456c6f4fd26feb28a23abc9de5a131dd9fdd255540fc2700N
Size

69KB
Sample

241003-lhtjnswdpj
MD5

8c9eea4a5262566c6fea2c9e837a6940
SHA1

46ea5096909af2a340af732a87ae4933663da9df
SHA256

2ec2a7d5f68c292d456c6f4fd26feb28a23abc9de5a131dd9fdd255540fc2700
SHA512

fe7a304d39383902a254d3d9e205c5f1fb512e0395828e0d3d91a471303d7cec585059a1a567d1d555c0e66bb7a15846fd525ba3e0dfb41adb19e6c3e6c12dc3
SSDEEP

1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbRJhHhLhIKw:NAoglOwvl4ulkP6vghzwYu7vih9GueIn

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  2ec2a7d5f68c292d456c6f4fd26feb28a23abc9de5a131dd9fdd255540fc2700N
- Size
  
  69KB
- MD5
  
  8c9eea4a5262566c6fea2c9e837a6940
- SHA1
  
  46ea5096909af2a340af732a87ae4933663da9df
- SHA256
  
  2ec2a7d5f68c292d456c6f4fd26feb28a23abc9de5a131dd9fdd255540fc2700
- SHA512
  
  fe7a304d39383902a254d3d9e205c5f1fb512e0395828e0d3d91a471303d7cec585059a1a567d1d555c0e66bb7a15846fd525ba3e0dfb41adb19e6c3e6c12dc3
- SSDEEP
  
  1536:NAo0Tj2d6rnJwwvl4ulkP6vghzwYu7vih9GueIh9j2IoHAjU+Eh6IbRJhHhLhIKw:NAoglOwvl4ulkP6vghzwYu7vih9GueIn
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence