4d072bfef9760406d727969453b6e22a66bea772b76e6689ef445fd15bb6c57d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d072bfef9760406d727969453b6e22a66bea772b76e6689ef445fd15bb6c57dN
Size

89KB
Sample

241009-fjq72szbmp
MD5

4df40e76ed1636d9d0dd6ed240661010
SHA1

436576d318abe6511e1dfc7128385c674fc215a7
SHA256

4d072bfef9760406d727969453b6e22a66bea772b76e6689ef445fd15bb6c57d
SHA512

54f1b2610fb6d37c9410cbdbb7bb55a316b92666713797ed99cd2c83b59fca17a79de627f877c0e96fe99b49fe5b57d05e824b6dd6820d95915da42421d1c494
SSDEEP

768:5vw9816thKQLro64/wQkNrfrunMxVFA3k:lEG/0o6lbunMxVS3k

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  4d072bfef9760406d727969453b6e22a66bea772b76e6689ef445fd15bb6c57dN
- Size
  
  89KB
- MD5
  
  4df40e76ed1636d9d0dd6ed240661010
- SHA1
  
  436576d318abe6511e1dfc7128385c674fc215a7
- SHA256
  
  4d072bfef9760406d727969453b6e22a66bea772b76e6689ef445fd15bb6c57d
- SHA512
  
  54f1b2610fb6d37c9410cbdbb7bb55a316b92666713797ed99cd2c83b59fca17a79de627f877c0e96fe99b49fe5b57d05e824b6dd6820d95915da42421d1c494
- SSDEEP
  
  768:5vw9816thKQLro64/wQkNrfrunMxVFA3k:lEG/0o6lbunMxVS3k
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence