ece91b14a11aa22d5ee0a8039b9eedd42415c08d165f3ae2fcc41ed10804559c | Triage

Sharing

General

Target

ece91b14a11aa22d5ee0a8039b9eedd42415c08d165f3ae2fcc41ed10804559cN
Size

372KB
Sample

241005-qd3zrsybna
MD5

eba0d75ed978c664d871475cc738e480
SHA1

4e6bde71d8cc3750613196cd50d0781c5728d586
SHA256

ece91b14a11aa22d5ee0a8039b9eedd42415c08d165f3ae2fcc41ed10804559c
SHA512

1305ab2cf6b9635d6b761d9ddd8daa8b5f1451adb145fcd90af41c11219179625aed69ae9a9f4a043e2db2ff7c2f236e27c00b2ff3f1bd5500a450c98a3f4c83
SSDEEP

3072:CEGh0owmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGjl/Oe2MUVg3vTeKcAEciTBqr3

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  ece91b14a11aa22d5ee0a8039b9eedd42415c08d165f3ae2fcc41ed10804559cN
- Size
  
  372KB
- MD5
  
  eba0d75ed978c664d871475cc738e480
- SHA1
  
  4e6bde71d8cc3750613196cd50d0781c5728d586
- SHA256
  
  ece91b14a11aa22d5ee0a8039b9eedd42415c08d165f3ae2fcc41ed10804559c
- SHA512
  
  1305ab2cf6b9635d6b761d9ddd8daa8b5f1451adb145fcd90af41c11219179625aed69ae9a9f4a043e2db2ff7c2f236e27c00b2ff3f1bd5500a450c98a3f4c83
- SSDEEP
  
  3072:CEGh0owmlJOiNOe2MUVg3bHrH/HqOYGte+rcC4F0fJGRIS8Rfd7eQEcGcrTutTBE:CEGjl/Oe2MUVg3vTeKcAEciTBqr3
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence