b4f85f6c591003d94a40771116405cd8864503620ab5c634f7170d23e455d625 | Triage

Sharing

General

Target

d5bbd2ebcea333ae9c571e7f00fd38e0N.exe
Size

64KB
Sample

240725-q5fzbavdmd
MD5

d5bbd2ebcea333ae9c571e7f00fd38e0
SHA1

cdb5c788e09eb89d48abe2305030335e2e84d90d
SHA256

b4f85f6c591003d94a40771116405cd8864503620ab5c634f7170d23e455d625
SHA512

2fd1c6c0d6811ff44b7521ff9777d0cd629d6153639a0f9b380ca6276a6e3c7d9b714f378d584f1f4d7a593ad7d931c4f92da91cc176747d3fc883e33d59c5ba
SSDEEP

1536:QIQJDMmDtyGblODk48755Wy9rPFW2iwTbW:XQJgmUTDQXXJFW2VTbW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d5bbd2ebcea333ae9c571e7f00fd38e0N.exe
- Size
  
  64KB
- MD5
  
  d5bbd2ebcea333ae9c571e7f00fd38e0
- SHA1
  
  cdb5c788e09eb89d48abe2305030335e2e84d90d
- SHA256
  
  b4f85f6c591003d94a40771116405cd8864503620ab5c634f7170d23e455d625
- SHA512
  
  2fd1c6c0d6811ff44b7521ff9777d0cd629d6153639a0f9b380ca6276a6e3c7d9b714f378d584f1f4d7a593ad7d931c4f92da91cc176747d3fc883e33d59c5ba
- SSDEEP
  
  1536:QIQJDMmDtyGblODk48755Wy9rPFW2iwTbW:XQJgmUTDQXXJFW2VTbW
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence