f57e825e397c449cb084049772beeb8d1f36c87ecae56436037a34bfe0dbefa2 | Triage

Sharing

General

Target

d31fd1dcea66f91a4e542df6715531a0N.exe
Size

71KB
Sample

240725-qh82kstdla
MD5

d31fd1dcea66f91a4e542df6715531a0
SHA1

887447bb68cb0e189885aadfb6507758b744c367
SHA256

f57e825e397c449cb084049772beeb8d1f36c87ecae56436037a34bfe0dbefa2
SHA512

a6de305fc3373e9c2f7fa5d2ee7a109073aaa00ce913c856989c3e2de310b79fa909bea9b2c64975a70868f198d49c303923c28f9f559bc7d921573b49406911
SSDEEP

1536:iGJPlA3dihSRnu+GsEiPxLuXkG0xBRQf9DbEyRCRRRoR4Rk:L1lThb+NEiJLuX70vefREy032ya

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d31fd1dcea66f91a4e542df6715531a0N.exe
- Size
  
  71KB
- MD5
  
  d31fd1dcea66f91a4e542df6715531a0
- SHA1
  
  887447bb68cb0e189885aadfb6507758b744c367
- SHA256
  
  f57e825e397c449cb084049772beeb8d1f36c87ecae56436037a34bfe0dbefa2
- SHA512
  
  a6de305fc3373e9c2f7fa5d2ee7a109073aaa00ce913c856989c3e2de310b79fa909bea9b2c64975a70868f198d49c303923c28f9f559bc7d921573b49406911
- SSDEEP
  
  1536:iGJPlA3dihSRnu+GsEiPxLuXkG0xBRQf9DbEyRCRRRoR4Rk:L1lThb+NEiJLuX70vefREy032ya
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence