e9f53677e9ccc5dbf25957b64a6655f96454eb6c72f20d680e4e07857d48a496 | Triage

Sharing

General

Target

e9f53677e9ccc5dbf25957b64a6655f96454eb6c72f20d680e4e07857d48a496
Size

91KB
Sample

241120-fwbyws1qbz
MD5

7c6930485cc997a45c0386f06506d6b8
SHA1

6a48ff03e3b5ab46e52f7bc81eb5535f9f66fd9f
SHA256

e9f53677e9ccc5dbf25957b64a6655f96454eb6c72f20d680e4e07857d48a496
SHA512

f8245cc3c8ce0239c193cc4b0174820b00ed22f5af2d4af74e778f9a351387beb3f9cd72f7af666e6657231bffae07ce0702eb5d52e83d53ad6098885d1cf49e
SSDEEP

768:5vw9816uhKiroL4/wQNNrfrunMxVFA3b7t:lEGkmoLlCunMxVS3Ht

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  e9f53677e9ccc5dbf25957b64a6655f96454eb6c72f20d680e4e07857d48a496
- Size
  
  91KB
- MD5
  
  7c6930485cc997a45c0386f06506d6b8
- SHA1
  
  6a48ff03e3b5ab46e52f7bc81eb5535f9f66fd9f
- SHA256
  
  e9f53677e9ccc5dbf25957b64a6655f96454eb6c72f20d680e4e07857d48a496
- SHA512
  
  f8245cc3c8ce0239c193cc4b0174820b00ed22f5af2d4af74e778f9a351387beb3f9cd72f7af666e6657231bffae07ce0702eb5d52e83d53ad6098885d1cf49e
- SSDEEP
  
  768:5vw9816uhKiroL4/wQNNrfrunMxVFA3b7t:lEGkmoLlCunMxVS3Ht
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence