8e76f8611186cb91090d4771c60b1c3627224f7899b76abaad16e1496ca65c22 | Triage

Sharing

General

Target

8e76f8611186cb91090d4771c60b1c3627224f7899b76abaad16e1496ca65c22N
Size

61KB
Sample

241010-spht3sxerr
MD5

b6c4e2088246caffcf0eb83225f7eed0
SHA1

7d001e0ae1280fa2f667c81a06e781945a24dd6d
SHA256

8e76f8611186cb91090d4771c60b1c3627224f7899b76abaad16e1496ca65c22
SHA512

a30d24601c36392842abe36c30603e4a5d1d1ee043247b9bdd3a7770ff6a34b4300bc5a4edeafa6824b9f050e35749e2055c9bb69c8e75ee3e6602fbe638c312
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhId:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV3

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  8e76f8611186cb91090d4771c60b1c3627224f7899b76abaad16e1496ca65c22N
- Size
  
  61KB
- MD5
  
  b6c4e2088246caffcf0eb83225f7eed0
- SHA1
  
  7d001e0ae1280fa2f667c81a06e781945a24dd6d
- SHA256
  
  8e76f8611186cb91090d4771c60b1c3627224f7899b76abaad16e1496ca65c22
- SHA512
  
  a30d24601c36392842abe36c30603e4a5d1d1ee043247b9bdd3a7770ff6a34b4300bc5a4edeafa6824b9f050e35749e2055c9bb69c8e75ee3e6602fbe638c312
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhId:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV3
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence