857ebb5d66d5032182768c9a977969f2e972f9f99601800c477ec9ecdb08eddd | Triage

Sharing

General

Target

NEAS.427975bc0df96209c2d035396ff577d0_JC.exe
Size

80KB
Sample

231105-frdlxsda84
MD5

427975bc0df96209c2d035396ff577d0
SHA1

9fb25d22b45c40a08876ae577946abb3b9edb2c3
SHA256

857ebb5d66d5032182768c9a977969f2e972f9f99601800c477ec9ecdb08eddd
SHA512

a1521b2f9a7d5459eccb8597d8c1e335d9c889943b4a5389c3b9eb3c354ca903458e0271ab38c7d6c23f584ce529839a01d513a4717fd63067475bb28042cacd
SSDEEP

1536:WJkqpME98v/E/NHXcrs1wjwwsT7Ern2LhJ9VqDlzVxyh+CbxMa:6ppB8vM1Mrew0wC7EwhJ9IDlRxyhTb7

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.427975bc0df96209c2d035396ff577d0_JC.exe
- Size
  
  80KB
- MD5
  
  427975bc0df96209c2d035396ff577d0
- SHA1
  
  9fb25d22b45c40a08876ae577946abb3b9edb2c3
- SHA256
  
  857ebb5d66d5032182768c9a977969f2e972f9f99601800c477ec9ecdb08eddd
- SHA512
  
  a1521b2f9a7d5459eccb8597d8c1e335d9c889943b4a5389c3b9eb3c354ca903458e0271ab38c7d6c23f584ce529839a01d513a4717fd63067475bb28042cacd
- SSDEEP
  
  1536:WJkqpME98v/E/NHXcrs1wjwwsT7Ern2LhJ9VqDlzVxyh+CbxMa:6ppB8vM1Mrew0wC7EwhJ9IDlRxyhTb7
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2