676fe95f831fc9a479ed0a9ac43eb5b4fdc4bc026f7daab4c53eb0a6a5c3b35a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee6fabc758bc1920f073b84698429d70N.exe
Size

59KB
Sample

240725-x1q22ssfmg
MD5

ee6fabc758bc1920f073b84698429d70
SHA1

a16069a1298c86ea135c83748bc0015172d6c421
SHA256

676fe95f831fc9a479ed0a9ac43eb5b4fdc4bc026f7daab4c53eb0a6a5c3b35a
SHA512

50520ac272d27fa3459c6552d2ef3122187f60ba152d7cea9a37df21268af4422d6b61ca1a66d43f5159aa3b87a0b56201e643d9ba2865ad5d08c17aba38fd6b
SSDEEP

768:S8ml4sGjU1+afZa3nP2eY5hvy+a5PiPow1ot5kDyNHEbq2asy60Pao2p/1H5mDXa:SP4djw+afZaOeaxAlEbDasRSX2LSO

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ee6fabc758bc1920f073b84698429d70N.exe
- Size
  
  59KB
- MD5
  
  ee6fabc758bc1920f073b84698429d70
- SHA1
  
  a16069a1298c86ea135c83748bc0015172d6c421
- SHA256
  
  676fe95f831fc9a479ed0a9ac43eb5b4fdc4bc026f7daab4c53eb0a6a5c3b35a
- SHA512
  
  50520ac272d27fa3459c6552d2ef3122187f60ba152d7cea9a37df21268af4422d6b61ca1a66d43f5159aa3b87a0b56201e643d9ba2865ad5d08c17aba38fd6b
- SSDEEP
  
  768:S8ml4sGjU1+afZa3nP2eY5hvy+a5PiPow1ot5kDyNHEbq2asy60Pao2p/1H5mDXa:SP4djw+afZaOeaxAlEbDasRSX2LSO
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence