6fa2e771859c11b02d922fa9bcb64b2c6172a58a894a9159ee34549b41ad7e2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fa2e771859c11b02d922fa9bcb64b2c6172a58a894a9159ee34549b41ad7e2dN
Size

492KB
Sample

241004-244vjawclf
MD5

f8ee8f3f59d441bc720b2cec2dbf7040
SHA1

6864b841a043062746307be9cd3b83b02c88e0fe
SHA256

6fa2e771859c11b02d922fa9bcb64b2c6172a58a894a9159ee34549b41ad7e2d
SHA512

18c296bb8b78142901093a9364d1ac0565d06bc96f7b6760ab043d73b7bf4d487593cc55fddf6cbf9babd5b1a42aa6480da2240d699b92b5d89a7f172d341b2a
SSDEEP

12288:ntKe6Zv23YeVONkJDFPQeGySItg8lnZVUxP3t0:76Zv2l4kPQeGyp6t0

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  6fa2e771859c11b02d922fa9bcb64b2c6172a58a894a9159ee34549b41ad7e2dN
- Size
  
  492KB
- MD5
  
  f8ee8f3f59d441bc720b2cec2dbf7040
- SHA1
  
  6864b841a043062746307be9cd3b83b02c88e0fe
- SHA256
  
  6fa2e771859c11b02d922fa9bcb64b2c6172a58a894a9159ee34549b41ad7e2d
- SHA512
  
  18c296bb8b78142901093a9364d1ac0565d06bc96f7b6760ab043d73b7bf4d487593cc55fddf6cbf9babd5b1a42aa6480da2240d699b92b5d89a7f172d341b2a
- SSDEEP
  
  12288:ntKe6Zv23YeVONkJDFPQeGySItg8lnZVUxP3t0:76Zv2l4kPQeGyp6t0
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
- Modifies system executable filetype association
  persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Registry Run Keys / Startup Folder

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence