a4072e8eaeb6b20ac1cf86e4c41749c36cceb40874f1b7aa91436273659e812f | Triage

Sharing

General

Target

a4072e8eaeb6b20ac1cf86e4c41749c36cceb40874f1b7aa91436273659e812f.exe
Size

89KB
Sample

241119-vk8k2stlam
MD5

49a81dfb663d039613d3042213bde9f6
SHA1

b97e6624b58d18ad87669de1fa6092d93d342c13
SHA256

a4072e8eaeb6b20ac1cf86e4c41749c36cceb40874f1b7aa91436273659e812f
SHA512

1a931ed945c2dc1432a2ff9bfec51a1b9cacff8b248e7d5fe66d246a118251ecc64b05c06254d3327acf462b92e70048d4b9a5a2c27197bc63674a16b99b22a9
SSDEEP

768:Qvw9816vhKQLro54/wQRNrfrunMxVFA3b7gli:YEGh0o5l2unMxVS3Hgw

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  a4072e8eaeb6b20ac1cf86e4c41749c36cceb40874f1b7aa91436273659e812f.exe
- Size
  
  89KB
- MD5
  
  49a81dfb663d039613d3042213bde9f6
- SHA1
  
  b97e6624b58d18ad87669de1fa6092d93d342c13
- SHA256
  
  a4072e8eaeb6b20ac1cf86e4c41749c36cceb40874f1b7aa91436273659e812f
- SHA512
  
  1a931ed945c2dc1432a2ff9bfec51a1b9cacff8b248e7d5fe66d246a118251ecc64b05c06254d3327acf462b92e70048d4b9a5a2c27197bc63674a16b99b22a9
- SSDEEP
  
  768:Qvw9816vhKQLro54/wQRNrfrunMxVFA3b7gli:YEGh0o5l2unMxVS3Hgw
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence