9ea1ebfbaad70b70a6b3d20eb19858283fb80b7f2ffcf54a1b64ee0b160f23f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9ea1ebfbaad70b70a6b3d20eb19858283fb80b7f2ffcf54a1b64ee0b160f23f8N
Size

88KB
Sample

241006-e9p71asgmp
MD5

b381cdb0ea1410e3fafc78ee82b34ae0
SHA1

1643547a70af842cc1e99f2fdfd003fedaa958bc
SHA256

9ea1ebfbaad70b70a6b3d20eb19858283fb80b7f2ffcf54a1b64ee0b160f23f8
SHA512

fcf53fc43f82c5e57177d5f3848d144c45e43beab869b0aa2961dca4099dccb75114f91bd463f44c088fe2dcdaca38b2bba573467fcab30a7394fda4dc0cfb5a
SSDEEP

768:5vw9816thKQLro04/wQkNrfrunMxVFA3V:lEG/0o0lbunMxVS3V

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  9ea1ebfbaad70b70a6b3d20eb19858283fb80b7f2ffcf54a1b64ee0b160f23f8N
- Size
  
  88KB
- MD5
  
  b381cdb0ea1410e3fafc78ee82b34ae0
- SHA1
  
  1643547a70af842cc1e99f2fdfd003fedaa958bc
- SHA256
  
  9ea1ebfbaad70b70a6b3d20eb19858283fb80b7f2ffcf54a1b64ee0b160f23f8
- SHA512
  
  fcf53fc43f82c5e57177d5f3848d144c45e43beab869b0aa2961dca4099dccb75114f91bd463f44c088fe2dcdaca38b2bba573467fcab30a7394fda4dc0cfb5a
- SSDEEP
  
  768:5vw9816thKQLro04/wQkNrfrunMxVFA3V:lEG/0o0lbunMxVS3V
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence