fcf16d1fade241bfbb0ce15b3d5a61e1d576853087c2284b0e779d370e1662c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fcf16d1fade241bfbb0ce15b3d5a61e1d576853087c2284b0e779d370e1662c0
Size

6.2MB
Sample

241010-k19syasepf
MD5

74c8a3e39027aa7d7628b3b9436d972b
SHA1

f802302307c3487a912fae82499190207421b0d8
SHA256

fcf16d1fade241bfbb0ce15b3d5a61e1d576853087c2284b0e779d370e1662c0
SHA512

de69e1c1a4add414c616faf33acce50c64bb84736afd94462d3109e1b9cc57e7eca5cfc0135dd1abe66c9987321fb709f2c94111f070ae1c9d2673c941cde33e
SSDEEP

98304:vym+AAlQx6VV2uW5MI079g+DltLGMY8DI65KiaYGgQ30LJd2UqLjkLqpMDmNpoeF:vdsVoL2V76+DXLZy7YM30LzajzpohhQ

Score

7^/10

discovery persistence pyinstaller

Malware Config

Targets

- Target
  
  fcf16d1fade241bfbb0ce15b3d5a61e1d576853087c2284b0e779d370e1662c0
- Size
  
  6.2MB
- MD5
  
  74c8a3e39027aa7d7628b3b9436d972b
- SHA1
  
  f802302307c3487a912fae82499190207421b0d8
- SHA256
  
  fcf16d1fade241bfbb0ce15b3d5a61e1d576853087c2284b0e779d370e1662c0
- SHA512
  
  de69e1c1a4add414c616faf33acce50c64bb84736afd94462d3109e1b9cc57e7eca5cfc0135dd1abe66c9987321fb709f2c94111f070ae1c9d2673c941cde33e
- SSDEEP
  
  98304:vym+AAlQx6VV2uW5MI079g+DltLGMY8DI65KiaYGgQ30LJd2UqLjkLqpMDmNpoeF:vdsVoL2V76+DXLZy7YM30LzajzpohhQ
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence