e4f9e790eedde5a1f3f7ad74ea9d49d733c21beda81e9826f46c618b7a850eb5 | Triage

Sharing

General

Target

e977f71cd62bd2fb8545b682e89cc050N.exe
Size

440KB
Sample

240725-wwc4yszarg
MD5

e977f71cd62bd2fb8545b682e89cc050
SHA1

312f9ba1e1c617442a1d8180d9c4e96282c065f6
SHA256

e4f9e790eedde5a1f3f7ad74ea9d49d733c21beda81e9826f46c618b7a850eb5
SHA512

1d582753a2375e095937f650cd0df02ea136636e8d08948d187f8b023ad425047509578b551778f6b201845b64a0ffd6d78e3332c4076a168a53c52e928cec90
SSDEEP

6144:RrC6C1aN4q8hhp115M/m5Y4q8hhp1cACYvo4q8hhp115M/m5Y4q8hhp1:ZCdqShjMueShYHRShjMueSh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e977f71cd62bd2fb8545b682e89cc050N.exe
- Size
  
  440KB
- MD5
  
  e977f71cd62bd2fb8545b682e89cc050
- SHA1
  
  312f9ba1e1c617442a1d8180d9c4e96282c065f6
- SHA256
  
  e4f9e790eedde5a1f3f7ad74ea9d49d733c21beda81e9826f46c618b7a850eb5
- SHA512
  
  1d582753a2375e095937f650cd0df02ea136636e8d08948d187f8b023ad425047509578b551778f6b201845b64a0ffd6d78e3332c4076a168a53c52e928cec90
- SSDEEP
  
  6144:RrC6C1aN4q8hhp115M/m5Y4q8hhp1cACYvo4q8hhp115M/m5Y4q8hhp1:ZCdqShjMueShYHRShjMueSh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence