9217d12f976b923310c48bdec89d36b5a580d53803b4a13530f1d235474ce44b | Triage

Sharing

General

Target

9217d12f976b923310c48bdec89d36b5a580d53803b4a13530f1d235474ce44bN
Size

380KB
Sample

241014-qsk3haxflg
MD5

04d89e338027b99222b32f45263f8ed0
SHA1

0b1923290ed255b70fa1f88ed4e7582948956638
SHA256

9217d12f976b923310c48bdec89d36b5a580d53803b4a13530f1d235474ce44b
SHA512

189869143e51e9ce19b9f731c416b1e874a689c3cd26bfa7c2f4bd577016cb4c3c35bd6474b59d33adabd5d18261007b22b28922f5197a2597bd67c03ae433e6
SSDEEP

3072:mEGh0ohlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEG7l7Oe2MUVg3v2IneKcAEcARy

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  9217d12f976b923310c48bdec89d36b5a580d53803b4a13530f1d235474ce44bN
- Size
  
  380KB
- MD5
  
  04d89e338027b99222b32f45263f8ed0
- SHA1
  
  0b1923290ed255b70fa1f88ed4e7582948956638
- SHA256
  
  9217d12f976b923310c48bdec89d36b5a580d53803b4a13530f1d235474ce44b
- SHA512
  
  189869143e51e9ce19b9f731c416b1e874a689c3cd26bfa7c2f4bd577016cb4c3c35bd6474b59d33adabd5d18261007b22b28922f5197a2597bd67c03ae433e6
- SSDEEP
  
  3072:mEGh0ohlPOiDOe2MUVg3bHrH/HqOYGb+4QnZZIne+rcC4F0fJGRIS8Rfd7eQEcGw:mEG7l7Oe2MUVg3v2IneKcAEcARy
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence