ef8ed955641e32b76dbfa0b432102a16decdcc3c944719b93611f921a56ecf4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef8ed955641e32b76dbfa0b432102a16decdcc3c944719b93611f921a56ecf4eN
Size

58KB
Sample

241015-ekz1xaxglp
MD5

7c774685727c4c1a3af4af0faa8a8b50
SHA1

b2f122f7715d376b605e4b42967758299476812a
SHA256

ef8ed955641e32b76dbfa0b432102a16decdcc3c944719b93611f921a56ecf4e
SHA512

be9c684bc5e5ed3615465a301d28f1a092db662c3c6c9488919d4e8b6b7cac262c4664cdcc8fbb5703a41c16f37b6b94106ad6f54f9d21070bdfb16782cc24ad
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIa:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef8ed955641e32b76dbfa0b432102a16decdcc3c944719b93611f921a56ecf4eN
- Size
  
  58KB
- MD5
  
  7c774685727c4c1a3af4af0faa8a8b50
- SHA1
  
  b2f122f7715d376b605e4b42967758299476812a
- SHA256
  
  ef8ed955641e32b76dbfa0b432102a16decdcc3c944719b93611f921a56ecf4e
- SHA512
  
  be9c684bc5e5ed3615465a301d28f1a092db662c3c6c9488919d4e8b6b7cac262c4664cdcc8fbb5703a41c16f37b6b94106ad6f54f9d21070bdfb16782cc24ad
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIa:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV4
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence