4278909b70ffcc914fc4ae2c417506a029ea0e491515e871bd77274d1f5af4a4 | Triage

Sharing

General

Target

4278909b70ffcc914fc4ae2c417506a029ea0e491515e871bd77274d1f5af4a4N
Size

49KB
Sample

241012-wsehlstene
MD5

2f95ebfa19ee578684a74475d6d39e90
SHA1

91a08ad4eadf818c4b0e1b2b19a5883dca8e500f
SHA256

4278909b70ffcc914fc4ae2c417506a029ea0e491515e871bd77274d1f5af4a4
SHA512

e81759c8698744bdfd9aa376175439afc752af049cfa4f918ca160728140bcb3816e35d04302af6961579da73ae9053bc5d402e82b7802e6d8de452c02314e7e
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIE:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV+

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  4278909b70ffcc914fc4ae2c417506a029ea0e491515e871bd77274d1f5af4a4N
- Size
  
  49KB
- MD5
  
  2f95ebfa19ee578684a74475d6d39e90
- SHA1
  
  91a08ad4eadf818c4b0e1b2b19a5883dca8e500f
- SHA256
  
  4278909b70ffcc914fc4ae2c417506a029ea0e491515e871bd77274d1f5af4a4
- SHA512
  
  e81759c8698744bdfd9aa376175439afc752af049cfa4f918ca160728140bcb3816e35d04302af6961579da73ae9053bc5d402e82b7802e6d8de452c02314e7e
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIE:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV+
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence