709e9565a7a9fc8949bc6eee3335c4b5247e52f5ccae06af9046990bc9561545 | Triage

Sharing

General

Target

709e9565a7a9fc8949bc6eee3335c4b5247e52f5ccae06af9046990bc9561545N
Size

230KB
Sample

241017-1bxp3sxejg
MD5

3cb581d6ca6d74f3103548beba9622b0
SHA1

6fefd8e9274cd796e4f6ab9a76d1791afac85582
SHA256

709e9565a7a9fc8949bc6eee3335c4b5247e52f5ccae06af9046990bc9561545
SHA512

21a7394bd435127d7c62a4ea26373617dea2465409393ec14b227b13e2f0c3c0eab39cf06d22aab476f4c96ab5479deaef66687a18755bbbd05473bc61f3b6a2
SSDEEP

6144:4wnqO4OgaqP/MlH3aN5eDds5A/D8XG2MBuW4a/ViE2lPnT5sc7uVzmY:Dq7dnGqNSR/ygus/gNT6cqZ

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  709e9565a7a9fc8949bc6eee3335c4b5247e52f5ccae06af9046990bc9561545N
- Size
  
  230KB
- MD5
  
  3cb581d6ca6d74f3103548beba9622b0
- SHA1
  
  6fefd8e9274cd796e4f6ab9a76d1791afac85582
- SHA256
  
  709e9565a7a9fc8949bc6eee3335c4b5247e52f5ccae06af9046990bc9561545
- SHA512
  
  21a7394bd435127d7c62a4ea26373617dea2465409393ec14b227b13e2f0c3c0eab39cf06d22aab476f4c96ab5479deaef66687a18755bbbd05473bc61f3b6a2
- SSDEEP
  
  6144:4wnqO4OgaqP/MlH3aN5eDds5A/D8XG2MBuW4a/ViE2lPnT5sc7uVzmY:Dq7dnGqNSR/ygus/gNT6cqZ
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation