e449fc4d87087a91e84fcedfce4ae9f2e44c8f8e582870f844288be5f3591a95 | Triage

Sharing

General

Target

396d22cb638cd98c0c25dd35a2184230N.exe
Size

75KB
Sample

240726-wa899sterp
MD5

396d22cb638cd98c0c25dd35a2184230
SHA1

cf9f961751b9472ac6796b7f73ef17b0a566f6ce
SHA256

e449fc4d87087a91e84fcedfce4ae9f2e44c8f8e582870f844288be5f3591a95
SHA512

c752fc0a54aa44611af856b8ba78c83f20251df36cdc8838840747b7ed2e66f2fd0b6f9322d5630cf31654486afdb7e7389f797d9105f27d25f43b8b2659c641
SSDEEP

1536:GLZ/9eaKgX0n2SKfVMvR362L16+lWCWQv:GL66j216+bWQv

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  396d22cb638cd98c0c25dd35a2184230N.exe
- Size
  
  75KB
- MD5
  
  396d22cb638cd98c0c25dd35a2184230
- SHA1
  
  cf9f961751b9472ac6796b7f73ef17b0a566f6ce
- SHA256
  
  e449fc4d87087a91e84fcedfce4ae9f2e44c8f8e582870f844288be5f3591a95
- SHA512
  
  c752fc0a54aa44611af856b8ba78c83f20251df36cdc8838840747b7ed2e66f2fd0b6f9322d5630cf31654486afdb7e7389f797d9105f27d25f43b8b2659c641
- SSDEEP
  
  1536:GLZ/9eaKgX0n2SKfVMvR362L16+lWCWQv:GL66j216+bWQv
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence