4ccb3ed9df332b80c15bcabfa1487b0be39659040c2ed3f4ece0367d922b9577 | Triage

Sharing

General

Target

NEAS.f4d61f6e694116dfee47529718e14aa0.exe
Size

276KB
Sample

231014-j9363sce38
MD5

f4d61f6e694116dfee47529718e14aa0
SHA1

a75dfecf7c8a9e6e833bc97c39bb69661036dea9
SHA256

4ccb3ed9df332b80c15bcabfa1487b0be39659040c2ed3f4ece0367d922b9577
SHA512

1d948c7667507a63da5997e3febb31f6c63a1d87e39558fe5bbae8957880cdec090ebc9df2365f453f926fed472dc8fbb5eb6270c30a6f0f83f45a8149c1a055
SSDEEP

3072:d0X2JatoNVDMTjSDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDkOvhJjvc:kyatoQIdWZHEFJ7aWN1rtMsQBOSGaF+

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.f4d61f6e694116dfee47529718e14aa0.exe
- Size
  
  276KB
- MD5
  
  f4d61f6e694116dfee47529718e14aa0
- SHA1
  
  a75dfecf7c8a9e6e833bc97c39bb69661036dea9
- SHA256
  
  4ccb3ed9df332b80c15bcabfa1487b0be39659040c2ed3f4ece0367d922b9577
- SHA512
  
  1d948c7667507a63da5997e3febb31f6c63a1d87e39558fe5bbae8957880cdec090ebc9df2365f453f926fed472dc8fbb5eb6270c30a6f0f83f45a8149c1a055
- SSDEEP
  
  3072:d0X2JatoNVDMTjSDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDkOvhJjvc:kyatoQIdWZHEFJ7aWN1rtMsQBOSGaF+
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2