a6fd6bbda1823f868ee8b2ec834b3136764411dbfc8130df61a6fcc182d99780 | Triage

Sharing

General

Target

a6fd6bbda1823f868ee8b2ec834b3136764411dbfc8130df61a6fcc182d99780.exe
Size

55KB
Sample

250120-k4rfrsskgl
MD5

0d2f8d8d6103a7008b7c16f843fdfb9b
SHA1

4a3dd5593932ab3faf2fa105070927152da29c1c
SHA256

a6fd6bbda1823f868ee8b2ec834b3136764411dbfc8130df61a6fcc182d99780
SHA512

5fc9ee9a0e21bd0ff1344acadb56ef423070d7697c8b8c815eeffa13ab62eea9dc36fd85a769b97f7dd30a0db85d611aca025de3194975572ee1151df4645104
SSDEEP

1536:e6q10k0EFjed6rqJ+6v8tvGE9UHrSdghj8bvHRIkhbUIchUh80mhDhNIyH+htUeI:E1oEFlt6v8tvGE9UHrSdghj8bvHRIkhG

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6fd6bbda1823f868ee8b2ec834b3136764411dbfc8130df61a6fcc182d99780.exe
- Size
  
  55KB
- MD5
  
  0d2f8d8d6103a7008b7c16f843fdfb9b
- SHA1
  
  4a3dd5593932ab3faf2fa105070927152da29c1c
- SHA256
  
  a6fd6bbda1823f868ee8b2ec834b3136764411dbfc8130df61a6fcc182d99780
- SHA512
  
  5fc9ee9a0e21bd0ff1344acadb56ef423070d7697c8b8c815eeffa13ab62eea9dc36fd85a769b97f7dd30a0db85d611aca025de3194975572ee1151df4645104
- SSDEEP
  
  1536:e6q10k0EFjed6rqJ+6v8tvGE9UHrSdghj8bvHRIkhbUIchUh80mhDhNIyH+htUeI:E1oEFlt6v8tvGE9UHrSdghj8bvHRIkhG
Score

7^/10

discovery persistence
- Deletes itself
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence