d98cfadd956da9584cf781b41a02295575cc9a8620d31404a54dd483792a5b4e | Triage

Sharing

General

Target

d98cfadd956da9584cf781b41a02295575cc9a8620d31404a54dd483792a5b4e
Size

88KB
Sample

241121-k8ww2s1jez
MD5

a8aa99fec666e578a0961a3097cccc49
SHA1

352ecaaf9074d6cef69362991a1065fb9bb63011
SHA256

d98cfadd956da9584cf781b41a02295575cc9a8620d31404a54dd483792a5b4e
SHA512

d123299caeed70343ce091d0b26271d2d63701fb92f120f96d3f5b267a816b3a7f0fc844f9039e12bd0bf4612c6728fd9ecc49bc319926e0a434174c299674b3
SSDEEP

768:5vw9816thKQLroF4/wQkNrfrunMxVFA3V:lEG/0oFlbunMxVS3V

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  d98cfadd956da9584cf781b41a02295575cc9a8620d31404a54dd483792a5b4e
- Size
  
  88KB
- MD5
  
  a8aa99fec666e578a0961a3097cccc49
- SHA1
  
  352ecaaf9074d6cef69362991a1065fb9bb63011
- SHA256
  
  d98cfadd956da9584cf781b41a02295575cc9a8620d31404a54dd483792a5b4e
- SHA512
  
  d123299caeed70343ce091d0b26271d2d63701fb92f120f96d3f5b267a816b3a7f0fc844f9039e12bd0bf4612c6728fd9ecc49bc319926e0a434174c299674b3
- SSDEEP
  
  768:5vw9816thKQLroF4/wQkNrfrunMxVFA3V:lEG/0oFlbunMxVS3V
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence