9e084de1b902167dd4b5245b5894a8a5af359cc0ff7157eaa779026bc4d72e0d | Triage

Sharing

General

Target

9e084de1b902167dd4b5245b5894a8a5af359cc0ff7157eaa779026bc4d72e0dN.exe
Size

87KB
Sample

250217-cazahswlcl
MD5

787f456041bf4254739acbc647029300
SHA1

30184a4bd74d5ee4c04d3086c931ab098513128a
SHA256

9e084de1b902167dd4b5245b5894a8a5af359cc0ff7157eaa779026bc4d72e0d
SHA512

1d5fe117142b2c160bd2cedb96a6ea81f3858769dcbd43b203f8f9aa456191a1efa826a57b821b23e21e8f2fd918d4b8a4c843eed3061a5bd58956157de688fc
SSDEEP

384:5bLwOs8AHsc4sM6whKiroH4/CFsrdk5I1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUO1:5vw9816uhKiroH4/wQNNrfrunMxVFZ

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  9e084de1b902167dd4b5245b5894a8a5af359cc0ff7157eaa779026bc4d72e0dN.exe
- Size
  
  87KB
- MD5
  
  787f456041bf4254739acbc647029300
- SHA1
  
  30184a4bd74d5ee4c04d3086c931ab098513128a
- SHA256
  
  9e084de1b902167dd4b5245b5894a8a5af359cc0ff7157eaa779026bc4d72e0d
- SHA512
  
  1d5fe117142b2c160bd2cedb96a6ea81f3858769dcbd43b203f8f9aa456191a1efa826a57b821b23e21e8f2fd918d4b8a4c843eed3061a5bd58956157de688fc
- SSDEEP
  
  384:5bLwOs8AHsc4sM6whKiroH4/CFsrdk5I1Nb7g7FX7XYfruVDtM9tQ/FKlnVwUUO1:5vw9816uhKiroH4/wQNNrfrunMxVFZ
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Downloads MZ/PE file
- Deletes itself
- Executes dropped EXE
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence