16da179a31b8bd19a661bfa73c509adc8f66746f3130da1e9adc062864196931 | Triage

Sharing

General

Target

16da179a31b8bd19a661bfa73c509adc8f66746f3130da1e9adc062864196931N
Size

63KB
Sample

241009-hzc2gaweja
MD5

9ea103a3b55ef72112865f94af379f10
SHA1

fcab77e180ddf47762d202c4806f7e622dc81d60
SHA256

16da179a31b8bd19a661bfa73c509adc8f66746f3130da1e9adc062864196931
SHA512

061df5348a8e8f29616deab46133a2fdf533ef4a29895b6ea3836ac255de42d6d2abb26be96378c77b6d0f4b665734e854133f9576c82ef0bd1e39285fb27634
SSDEEP

1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAcBHUIFvSHbhqhJIFm:lAo1lOwvlKlXBP6vghzwYu7vih9GueIs

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  16da179a31b8bd19a661bfa73c509adc8f66746f3130da1e9adc062864196931N
- Size
  
  63KB
- MD5
  
  9ea103a3b55ef72112865f94af379f10
- SHA1
  
  fcab77e180ddf47762d202c4806f7e622dc81d60
- SHA256
  
  16da179a31b8bd19a661bfa73c509adc8f66746f3130da1e9adc062864196931
- SHA512
  
  061df5348a8e8f29616deab46133a2fdf533ef4a29895b6ea3836ac255de42d6d2abb26be96378c77b6d0f4b665734e854133f9576c82ef0bd1e39285fb27634
- SSDEEP
  
  1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAcBHUIFvSHbhqhJIFm:lAo1lOwvlKlXBP6vghzwYu7vih9GueIs
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence