34b6dd8484e6e896a748cd5f9dadf187425e617ff1bb9abb2b2c4fcc9736c12e | Triage

Sharing

General

Target

34b6dd8484e6e896a748cd5f9dadf187425e617ff1bb9abb2b2c4fcc9736c12eN
Size

8KB
Sample

241005-yydjlswelc
MD5

fe043459e3d532060a1bd4a46e35e380
SHA1

92ce249785a0a13214b8c047bf6520a65678011c
SHA256

34b6dd8484e6e896a748cd5f9dadf187425e617ff1bb9abb2b2c4fcc9736c12e
SHA512

09c21414d28121dee2e1ebcfe86bab88c531c45b937c16f8b21f35fe4fda1b6dd9d8409d372ea5fbfe19175ea64fa40c652258c0fe78e9ea6646ef0eba885d15
SSDEEP

192:M8h4SFyvWohE5xf6YUBSL63SUJqtMblWN:vO+ohE2B13NJqtM

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  34b6dd8484e6e896a748cd5f9dadf187425e617ff1bb9abb2b2c4fcc9736c12eN
- Size
  
  8KB
- MD5
  
  fe043459e3d532060a1bd4a46e35e380
- SHA1
  
  92ce249785a0a13214b8c047bf6520a65678011c
- SHA256
  
  34b6dd8484e6e896a748cd5f9dadf187425e617ff1bb9abb2b2c4fcc9736c12e
- SHA512
  
  09c21414d28121dee2e1ebcfe86bab88c531c45b937c16f8b21f35fe4fda1b6dd9d8409d372ea5fbfe19175ea64fa40c652258c0fe78e9ea6646ef0eba885d15
- SSDEEP
  
  192:M8h4SFyvWohE5xf6YUBSL63SUJqtMblWN:vO+ohE2B13NJqtM
Score

6^/10

discovery persistence
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence