a6e58f8fa14634fb98239b9f148443f1ae36ca8a51f38413c5ef770ece281c05 | Triage

Sharing

General

Target

a6e58f8fa14634fb98239b9f148443f1ae36ca8a51f38413c5ef770ece281c05.exe
Size

89KB
Sample

241119-pbwx1a1jem
MD5

3c7b9fbdcf8376e9d3097a4adf895567
SHA1

877e810fa9757528bad34b1a24362cf6fb84a56c
SHA256

a6e58f8fa14634fb98239b9f148443f1ae36ca8a51f38413c5ef770ece281c05
SHA512

3aeabed99d759ac7982af9240fa4998c58b4d26913a507551cb6f931e4bf10b29e1822ec052c823dc38953d6aba501c37574876f856f76fcb0f709a8650ea029
SSDEEP

768:Qvw9816vhKQLroS4/wQRN/frunMxVFA3b7glF:YEGh0oSlKunMxVS3Hgj

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6e58f8fa14634fb98239b9f148443f1ae36ca8a51f38413c5ef770ece281c05.exe
- Size
  
  89KB
- MD5
  
  3c7b9fbdcf8376e9d3097a4adf895567
- SHA1
  
  877e810fa9757528bad34b1a24362cf6fb84a56c
- SHA256
  
  a6e58f8fa14634fb98239b9f148443f1ae36ca8a51f38413c5ef770ece281c05
- SHA512
  
  3aeabed99d759ac7982af9240fa4998c58b4d26913a507551cb6f931e4bf10b29e1822ec052c823dc38953d6aba501c37574876f856f76fcb0f709a8650ea029
- SSDEEP
  
  768:Qvw9816vhKQLroS4/wQRN/frunMxVFA3b7glF:YEGh0oSlKunMxVS3Hgj
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence