ecefdeca3f0936086119593c098b8b14b9431ae698f2861dba7a408f5f4fbe8b | Triage

Sharing

General

Target

18d0a100a87a3f16fa9b4f08a2d2a010N.exe
Size

2.7MB
Sample

240713-acg3xayhka
MD5

18d0a100a87a3f16fa9b4f08a2d2a010
SHA1

e1c367595f444375d9b5b2730959209f5fd5081f
SHA256

ecefdeca3f0936086119593c098b8b14b9431ae698f2861dba7a408f5f4fbe8b
SHA512

6fed51c840b7e0ea1f28df7c37e71d1245f0357afb9acd2f9416ded3a6725b9388853a2a266a8bf6e8aa68208f7f5e8e0175a2dd8dc2a7557c106985def5e566
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LB79w4Sx:+R0pI/IQlUoMPdmpSpH4

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  18d0a100a87a3f16fa9b4f08a2d2a010N.exe
- Size
  
  2.7MB
- MD5
  
  18d0a100a87a3f16fa9b4f08a2d2a010
- SHA1
  
  e1c367595f444375d9b5b2730959209f5fd5081f
- SHA256
  
  ecefdeca3f0936086119593c098b8b14b9431ae698f2861dba7a408f5f4fbe8b
- SHA512
  
  6fed51c840b7e0ea1f28df7c37e71d1245f0357afb9acd2f9416ded3a6725b9388853a2a266a8bf6e8aa68208f7f5e8e0175a2dd8dc2a7557c106985def5e566
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LB79w4Sx:+R0pI/IQlUoMPdmpSpH4
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2