0b3cd790b5620c64e631b730b8d41da445c5f5d43cd2297146df6ce29ad5a197 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b3cd790b5620c64e631b730b8d41da445c5f5d43cd2297146df6ce29ad5a197N
Size

63KB
Sample

241009-lwbk1swfmp
MD5

c1ac5c32f30bc7d00dd0697c56e30db0
SHA1

1c45eb355c26e6164ba36b080018ec917cb04b60
SHA256

0b3cd790b5620c64e631b730b8d41da445c5f5d43cd2297146df6ce29ad5a197
SHA512

f970e27923745ecb380af985395e5560be2ecb5d7929c6fb59623396bd28c00f69d34c75576ec8d84ea42aba77ffd9b7fb11f011269cd0ee22fad4a25dd8ebae
SSDEEP

1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johmh8hFISv:lAo1lOwvlKlXBP6vghzwYu7vih9GueIs

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  0b3cd790b5620c64e631b730b8d41da445c5f5d43cd2297146df6ce29ad5a197N
- Size
  
  63KB
- MD5
  
  c1ac5c32f30bc7d00dd0697c56e30db0
- SHA1
  
  1c45eb355c26e6164ba36b080018ec917cb04b60
- SHA256
  
  0b3cd790b5620c64e631b730b8d41da445c5f5d43cd2297146df6ce29ad5a197
- SHA512
  
  f970e27923745ecb380af985395e5560be2ecb5d7929c6fb59623396bd28c00f69d34c75576ec8d84ea42aba77ffd9b7fb11f011269cd0ee22fad4a25dd8ebae
- SSDEEP
  
  1536:lAo0ej2d6rnJwwvlKlIUBP6vghzwYu7vih9GueIh9j2IoHAjUvJQ/johmh8hFISv:lAo1lOwvlKlXBP6vghzwYu7vih9GueIs
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence