e8bff3d78e3ecdf44ba57712cf8aebd4ccd95afcbe44f07f75db2c9afe2532ab | Triage

Sharing

General

Target

e8bff3d78e3ecdf44ba57712cf8aebd4ccd95afcbe44f07f75db2c9afe2532abN
Size

40KB
Sample

241004-wmzatsselh
MD5

39221d501b0d1cb60b1639b786d4aa40
SHA1

1817730adc8c2526602e32b101b4e4e68fc4b591
SHA256

e8bff3d78e3ecdf44ba57712cf8aebd4ccd95afcbe44f07f75db2c9afe2532ab
SHA512

1ebc0a9e2b63253ab6e51593c28593c768a2967e3c28193d5f237f36e40ae539715cba057d9bb0e5a42d20a7c83f991287c61dea0394ab4bc2d7792e19c94fef
SSDEEP

768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAcBHUIF2r:e6q10k0EFjed6rqJ+6vghzwYu7vih9GE

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e8bff3d78e3ecdf44ba57712cf8aebd4ccd95afcbe44f07f75db2c9afe2532abN
- Size
  
  40KB
- MD5
  
  39221d501b0d1cb60b1639b786d4aa40
- SHA1
  
  1817730adc8c2526602e32b101b4e4e68fc4b591
- SHA256
  
  e8bff3d78e3ecdf44ba57712cf8aebd4ccd95afcbe44f07f75db2c9afe2532ab
- SHA512
  
  1ebc0a9e2b63253ab6e51593c28593c768a2967e3c28193d5f237f36e40ae539715cba057d9bb0e5a42d20a7c83f991287c61dea0394ab4bc2d7792e19c94fef
- SSDEEP
  
  768:ePyFZFASe0Ep0EpHZplRpqpd6rqxn4p6vghzwYu7vih9GueIh9j2IoHAcBHUIF2r:e6q10k0EFjed6rqJ+6vghzwYu7vih9GE
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence