b3fdfe7275f7257b1d9974df94c5e6899bbd430bd52cd1602f40ae726c960c30 | Triage

Sharing

General

Target

b3fdfe7275f7257b1d9974df94c5e6899bbd430bd52cd1602f40ae726c960c30N.exe
Size

55KB
Sample

250217-cah9aswle1
MD5

c6bbf963ac8813c64ee3b5fca047c870
SHA1

b5b8a5a6dab71983a706471e7a396ec94c219bc1
SHA256

b3fdfe7275f7257b1d9974df94c5e6899bbd430bd52cd1602f40ae726c960c30
SHA512

2c0aac9fb7b4382430711728b24d90cd99920a1e02b6ffc09e393dc8651cf62baa4602b67c1b767edf6ca128f3b1d2ac5dd16e0e30628f6e880ba88e05aed8d0
SSDEEP

768:m92omhryTtpkHT8C0wJuuJ+gCVNY5xBdeV6u3i01GFVmA:m6h2w39+jGfuoLR

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  b3fdfe7275f7257b1d9974df94c5e6899bbd430bd52cd1602f40ae726c960c30N.exe
- Size
  
  55KB
- MD5
  
  c6bbf963ac8813c64ee3b5fca047c870
- SHA1
  
  b5b8a5a6dab71983a706471e7a396ec94c219bc1
- SHA256
  
  b3fdfe7275f7257b1d9974df94c5e6899bbd430bd52cd1602f40ae726c960c30
- SHA512
  
  2c0aac9fb7b4382430711728b24d90cd99920a1e02b6ffc09e393dc8651cf62baa4602b67c1b767edf6ca128f3b1d2ac5dd16e0e30628f6e880ba88e05aed8d0
- SSDEEP
  
  768:m92omhryTtpkHT8C0wJuuJ+gCVNY5xBdeV6u3i01GFVmA:m6h2w39+jGfuoLR
Score

8^/10

discovery persistence
- Adds policy Run key to start application
  persistence
- Downloads MZ/PE file
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence