97e0d746cb209d9268b0356af17bd697477689d05f86728f817e4f3c15764e47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97e0d746cb209d9268b0356af17bd697477689d05f86728f817e4f3c15764e47
Size

192KB
Sample

241012-avds7ssflf
MD5

b280857a936c74ce2088b2d01e24b03c
SHA1

a0f070a52d5b40761a9fd204e1865b96d071bdc5
SHA256

97e0d746cb209d9268b0356af17bd697477689d05f86728f817e4f3c15764e47
SHA512

13f41523be51f8b9dc0af7f2dd6cfae1e9e2e714bffaa1f4bc66237bd2715e3f54930dff5b598b181df630a2e7c537bed5630eba37ea73969ba53718a7d91b16
SSDEEP

1536:1EGh0oBl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0oBl1OPOe2MUVg3Ve+rXfMUa

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  97e0d746cb209d9268b0356af17bd697477689d05f86728f817e4f3c15764e47
- Size
  
  192KB
- MD5
  
  b280857a936c74ce2088b2d01e24b03c
- SHA1
  
  a0f070a52d5b40761a9fd204e1865b96d071bdc5
- SHA256
  
  97e0d746cb209d9268b0356af17bd697477689d05f86728f817e4f3c15764e47
- SHA512
  
  13f41523be51f8b9dc0af7f2dd6cfae1e9e2e714bffaa1f4bc66237bd2715e3f54930dff5b598b181df630a2e7c537bed5630eba37ea73969ba53718a7d91b16
- SSDEEP
  
  1536:1EGh0oBl15IRVhNJ5Qef7BudMeNzVg3Ve+rrS2GunMxVS3H6:1EGh0oBl1OPOe2MUVg3Ve+rXfMUa
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence