abd5e404bced58d95642413da7d50914b3154c173a81554bd963d7fb0c22f588 | Triage

Sharing

General

Target

abd5e404bced58d95642413da7d50914b3154c173a81554bd963d7fb0c22f588N
Size

157KB
Sample

241009-hzy9pssdnq
MD5

17e59cf48db133aff300c527db7aceb0
SHA1

135fbb7d44a9ea8f8bd2db5aeb07fbc5a78fbfb9
SHA256

abd5e404bced58d95642413da7d50914b3154c173a81554bd963d7fb0c22f588
SHA512

de240fb1516b431a22d48ba092a95aa08878b97ea8ec8b9c70186062e559648584f308fce6496d6dd4e7f56cec3707683c83a54c2db21155c5aa96f602152378
SSDEEP

3072:phj0Hzpm9Tcek9R7dE62yiV5AO/aWeVomBhGYtr:30TpeceRF7aI+b

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  abd5e404bced58d95642413da7d50914b3154c173a81554bd963d7fb0c22f588N
- Size
  
  157KB
- MD5
  
  17e59cf48db133aff300c527db7aceb0
- SHA1
  
  135fbb7d44a9ea8f8bd2db5aeb07fbc5a78fbfb9
- SHA256
  
  abd5e404bced58d95642413da7d50914b3154c173a81554bd963d7fb0c22f588
- SHA512
  
  de240fb1516b431a22d48ba092a95aa08878b97ea8ec8b9c70186062e559648584f308fce6496d6dd4e7f56cec3707683c83a54c2db21155c5aa96f602152378
- SSDEEP
  
  3072:phj0Hzpm9Tcek9R7dE62yiV5AO/aWeVomBhGYtr:30TpeceRF7aI+b
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation