a3e30307cbc6be44691ec5a9453f2e024cd50eb9647766fa7b43b8cc11694437 | Triage

Sharing

General

Target

a3e30307cbc6be44691ec5a9453f2e024cd50eb9647766fa7b43b8cc11694437N
Size

18KB
Sample

241003-yw8lzathmq
MD5

f310745e836a449a2c725da22c9d2080
SHA1

243e45679daa31f653a6a98a5c9f383f1fdeffa3
SHA256

a3e30307cbc6be44691ec5a9453f2e024cd50eb9647766fa7b43b8cc11694437
SHA512

1cb65486969131948338ff248fd34e1790daa703b5c44d7a27952ca6358bf0f3baff432d8fb198fee8716200a08788bbdb5de2ff07d5ef667bc8848eb5388a96
SSDEEP

384:mcCGOuP9GjJgPAJSxSeFVLn5BnQpPEdNre4uILW6fMDzi:gAWeBSeLzuPuNuIBMni

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  a3e30307cbc6be44691ec5a9453f2e024cd50eb9647766fa7b43b8cc11694437N
- Size
  
  18KB
- MD5
  
  f310745e836a449a2c725da22c9d2080
- SHA1
  
  243e45679daa31f653a6a98a5c9f383f1fdeffa3
- SHA256
  
  a3e30307cbc6be44691ec5a9453f2e024cd50eb9647766fa7b43b8cc11694437
- SHA512
  
  1cb65486969131948338ff248fd34e1790daa703b5c44d7a27952ca6358bf0f3baff432d8fb198fee8716200a08788bbdb5de2ff07d5ef667bc8848eb5388a96
- SSDEEP
  
  384:mcCGOuP9GjJgPAJSxSeFVLn5BnQpPEdNre4uILW6fMDzi:gAWeBSeLzuPuNuIBMni
Score

8^/10

discovery persistence
- Sets service image path in registry
  persistence
- Deletes itself
- Executes dropped EXE
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence