0a4b44d4eb32466a0f0a5fc70828a877e439e63dc2bc6f1561f541083195d12b | Triage

Sharing

General

Target

0a4b44d4eb32466a0f0a5fc70828a877e439e63dc2bc6f1561f541083195d12b.exe
Size

128KB
Sample

241119-xlrp2a1cnq
MD5

6a73c73d3dd41294cd14a968f81cf329
SHA1

f9ed03c5c81d3fb1d1123f904ec148f87f9145a7
SHA256

0a4b44d4eb32466a0f0a5fc70828a877e439e63dc2bc6f1561f541083195d12b
SHA512

c39c2142a6fe12fb0c34bf5f40f1c3eb8ecb69df353be810c967f1a9325f4c1e3b5558aa6c3a226f811969a33635b529ebb728204fc76667a9da4e3e839a7238
SSDEEP

3072:8VMGKIbIaw8/HthUEkm+BC3K5eqU+BC3K5eqYroW:pGKmpnhxK70K7S

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  0a4b44d4eb32466a0f0a5fc70828a877e439e63dc2bc6f1561f541083195d12b.exe
- Size
  
  128KB
- MD5
  
  6a73c73d3dd41294cd14a968f81cf329
- SHA1
  
  f9ed03c5c81d3fb1d1123f904ec148f87f9145a7
- SHA256
  
  0a4b44d4eb32466a0f0a5fc70828a877e439e63dc2bc6f1561f541083195d12b
- SHA512
  
  c39c2142a6fe12fb0c34bf5f40f1c3eb8ecb69df353be810c967f1a9325f4c1e3b5558aa6c3a226f811969a33635b529ebb728204fc76667a9da4e3e839a7238
- SSDEEP
  
  3072:8VMGKIbIaw8/HthUEkm+BC3K5eqU+BC3K5eqYroW:pGKmpnhxK70K7S
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation