e12f9d3fa7478ac884c0deb708748dd7be86b84cfbb1c0a9bf2a23bfc9e05aa1 | Triage

Sharing

General

Target

e12f9d3fa7478ac884c0deb708748dd7be86b84cfbb1c0a9bf2a23bfc9e05aa1N
Size

64KB
Sample

241013-tzpaaawcpa
MD5

6cc2ca6116beedab442dc0d985ffb3b0
SHA1

5f3af230f289d1e63d46672878051f161e42dc1c
SHA256

e12f9d3fa7478ac884c0deb708748dd7be86b84cfbb1c0a9bf2a23bfc9e05aa1
SHA512

afa556614768b5ce917694112da20810909f885f6bcdb740373b1628f0df2e101313c689c753bb03ba5adb6a805a7905ae15344bcbf0e221b9f7dfe6cdbdf134
SSDEEP

384:ObIwOs8AHsc4sMDwhKQLrox4/CFsrdHWMZp:OEw9816vhKQLrox4/wQpWMZp

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  e12f9d3fa7478ac884c0deb708748dd7be86b84cfbb1c0a9bf2a23bfc9e05aa1N
- Size
  
  64KB
- MD5
  
  6cc2ca6116beedab442dc0d985ffb3b0
- SHA1
  
  5f3af230f289d1e63d46672878051f161e42dc1c
- SHA256
  
  e12f9d3fa7478ac884c0deb708748dd7be86b84cfbb1c0a9bf2a23bfc9e05aa1
- SHA512
  
  afa556614768b5ce917694112da20810909f885f6bcdb740373b1628f0df2e101313c689c753bb03ba5adb6a805a7905ae15344bcbf0e221b9f7dfe6cdbdf134
- SSDEEP
  
  384:ObIwOs8AHsc4sMDwhKQLrox4/CFsrdHWMZp:OEw9816vhKQLrox4/wQpWMZp
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence