b2c14ed5e2d7197fa12e275e5d7a56690a636bb9a91327d71f794ec4be373b35 | Triage

Sharing

General

Target

b2c14ed5e2d7197fa12e275e5d7a56690a636bb9a91327d71f794ec4be373b35N
Size

62KB
Sample

241017-nv6qwayhpp
MD5

e18ea2d36fe5e80942acb0eb7565f580
SHA1

190316655169ec1aa52be244b33ede849db691ae
SHA256

b2c14ed5e2d7197fa12e275e5d7a56690a636bb9a91327d71f794ec4be373b35
SHA512

c483bd1c0291ad0794c99ec544dc4b3409ac6fbc87f6aeeb99bcfeab83e9e37ca02cf9c61df1ecdc584d93ae39a0cc748e667f023d62aa0125eaec8faae3123f
SSDEEP

1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIF:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV/

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b2c14ed5e2d7197fa12e275e5d7a56690a636bb9a91327d71f794ec4be373b35N
- Size
  
  62KB
- MD5
  
  e18ea2d36fe5e80942acb0eb7565f580
- SHA1
  
  190316655169ec1aa52be244b33ede849db691ae
- SHA256
  
  b2c14ed5e2d7197fa12e275e5d7a56690a636bb9a91327d71f794ec4be373b35
- SHA512
  
  c483bd1c0291ad0794c99ec544dc4b3409ac6fbc87f6aeeb99bcfeab83e9e37ca02cf9c61df1ecdc584d93ae39a0cc748e667f023d62aa0125eaec8faae3123f
- SSDEEP
  
  1536:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYVFl2g5u58dO0xXHQEyYfdhNhFO5h3xhIF:+MA6C1VqaqhtgVRNToV7TtRu8rM0wYV/
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence