d4bbd5e36268adb910595fb13d246ebe9fa03afd510a71453c0a67618d028416 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4bbd5e36268adb910595fb13d246ebe9fa03afd510a71453c0a67618d028416
Size

59KB
Sample

241015-fxr2ha1ckj
MD5

cec5b17b736667f661cbd497520b896a
SHA1

1ce7c6dafd84b819bdd01b243817004b78ae8c93
SHA256

d4bbd5e36268adb910595fb13d246ebe9fa03afd510a71453c0a67618d028416
SHA512

62603d31c5a44776d274711451868a3f26b03135029f1c3bc2d32ab847ca40c69b556ec13e78d994bbbbc23d1d2eeb5a70c727dcd9117afdf17c4b2481c30c21
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI/:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVh

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  d4bbd5e36268adb910595fb13d246ebe9fa03afd510a71453c0a67618d028416
- Size
  
  59KB
- MD5
  
  cec5b17b736667f661cbd497520b896a
- SHA1
  
  1ce7c6dafd84b819bdd01b243817004b78ae8c93
- SHA256
  
  d4bbd5e36268adb910595fb13d246ebe9fa03afd510a71453c0a67618d028416
- SHA512
  
  62603d31c5a44776d274711451868a3f26b03135029f1c3bc2d32ab847ca40c69b556ec13e78d994bbbbc23d1d2eeb5a70c727dcd9117afdf17c4b2481c30c21
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhI/:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYVh
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence