a8c8dd45432731fd57da0526974a87277404390618259c4e3a1d399f0dc8eb0f | Triage

Sharing

General

Target

a8c8dd45432731fd57da0526974a87277404390618259c4e3a1d399f0dc8eb0f.exe
Size

30KB
Sample

241119-pahzravrds
MD5

09c5d4a349218803c472a3ed5e470b75
SHA1

d888a7485f4f40819361784e2fa96989034360cc
SHA256

a8c8dd45432731fd57da0526974a87277404390618259c4e3a1d399f0dc8eb0f
SHA512

83bb0651917cb4aa4e3e0ac35a37447f7ee2a78c032316c6bbc2944ee127bb5673c2f70c61caf1836e8b0fcc692694e4d9021f701268dfc3908ae2aaffb1cca8
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wk7IEhGOrlDth7h/IbjfhP6giH6hvaI:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wkS

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a8c8dd45432731fd57da0526974a87277404390618259c4e3a1d399f0dc8eb0f.exe
- Size
  
  30KB
- MD5
  
  09c5d4a349218803c472a3ed5e470b75
- SHA1
  
  d888a7485f4f40819361784e2fa96989034360cc
- SHA256
  
  a8c8dd45432731fd57da0526974a87277404390618259c4e3a1d399f0dc8eb0f
- SHA512
  
  83bb0651917cb4aa4e3e0ac35a37447f7ee2a78c032316c6bbc2944ee127bb5673c2f70c61caf1836e8b0fcc692694e4d9021f701268dfc3908ae2aaffb1cca8
- SSDEEP
  
  768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wk7IEhGOrlDth7h/IbjfhP6giH6hvaI:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wkS
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence