1e716acec0f8c78445db489b74b7c3ff027181e332377773f11530a7669f9693 | Triage

Sharing

General

Target

1e716acec0f8c78445db489b74b7c3ff027181e332377773f11530a7669f9693.exe
Size

4.4MB
Sample

241005-rc1npayhlh
MD5

dc80f69d4858ddf6895dcac9522a1943
SHA1

317d13edcc00528cae9c4fcc353d8d640a5d89a3
SHA256

1e716acec0f8c78445db489b74b7c3ff027181e332377773f11530a7669f9693
SHA512

21d4a8a4a962bad2aef43d3b8c3f25f16be30829139990076502e93bf4788949d47912e71be80c4ee72a6edd1ffe393efda38813650c6faf6709738a28475352
SSDEEP

49152:tD7tbFza8IBn2cpi7cSgWVh07Z2GBc024xF6QKRaTzBbW5ur7S3cx4B1TqBv7i:hxbMB2kZ2rUF6QKRybL7S

Score

6^/10

discovery persistence

Malware Config

Targets

- Target
  
  1e716acec0f8c78445db489b74b7c3ff027181e332377773f11530a7669f9693.exe
- Size
  
  4.4MB
- MD5
  
  dc80f69d4858ddf6895dcac9522a1943
- SHA1
  
  317d13edcc00528cae9c4fcc353d8d640a5d89a3
- SHA256
  
  1e716acec0f8c78445db489b74b7c3ff027181e332377773f11530a7669f9693
- SHA512
  
  21d4a8a4a962bad2aef43d3b8c3f25f16be30829139990076502e93bf4788949d47912e71be80c4ee72a6edd1ffe393efda38813650c6faf6709738a28475352
- SSDEEP
  
  49152:tD7tbFza8IBn2cpi7cSgWVh07Z2GBc024xF6QKRaTzBbW5ur7S3cx4B1TqBv7i:hxbMB2kZ2rUF6QKRybL7S
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Process Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence