d59bd98f835885336e6733adbf8a43aeb10fbf1629936eee4988891ced4ac386 | Triage

Sharing

General

Target

d59bd98f835885336e6733adbf8a43aeb10fbf1629936eee4988891ced4ac386N.exe
Size

73KB
Sample

241120-f5ljpa1rhv
MD5

79a94079460b7da993ef0264ee8f3780
SHA1

8251f6af71a94e5a49f65c3726f2411f6c7c1167
SHA256

d59bd98f835885336e6733adbf8a43aeb10fbf1629936eee4988891ced4ac386
SHA512

cf32dd0120667b2340bbb13fc1390e48e892195619f454eb8b99f6278734e0d2854039f01e6e2f11454cfae3c13e9d8f0851f649fc83f2f2f3fac9dfbcb88450
SSDEEP

1536:O7qvnKhWQtC3Izj6TrlDa2z6Ewd0zvPTQw9LBZR+d8V3zhb:eqvKztiIzj6xtDLBZR+d8Vj5

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d59bd98f835885336e6733adbf8a43aeb10fbf1629936eee4988891ced4ac386N.exe
- Size
  
  73KB
- MD5
  
  79a94079460b7da993ef0264ee8f3780
- SHA1
  
  8251f6af71a94e5a49f65c3726f2411f6c7c1167
- SHA256
  
  d59bd98f835885336e6733adbf8a43aeb10fbf1629936eee4988891ced4ac386
- SHA512
  
  cf32dd0120667b2340bbb13fc1390e48e892195619f454eb8b99f6278734e0d2854039f01e6e2f11454cfae3c13e9d8f0851f649fc83f2f2f3fac9dfbcb88450
- SSDEEP
  
  1536:O7qvnKhWQtC3Izj6TrlDa2z6Ewd0zvPTQw9LBZR+d8V3zhb:eqvKztiIzj6xtDLBZR+d8Vj5
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence