9f20aa8a80331e444d6db9d7f95cca50541739cd74c148da58f9484d609b550b | Triage

Sharing

General

Target

58413430697db301a2a490dbce0c7f30N.exe
Size

96KB
Sample

240726-z9w1rswaql
MD5

58413430697db301a2a490dbce0c7f30
SHA1

4677399f319888563ec56c4a7eb9c5c73e982cbd
SHA256

9f20aa8a80331e444d6db9d7f95cca50541739cd74c148da58f9484d609b550b
SHA512

1800583daf47638f7991951a9ae419a66020ab65f511a6f3477d10eb73ddb768df08d242a7a752ccc7b9373de1744f7b0551852e9d42f965f588b57aa7c9a675
SSDEEP

1536:jLWkp5iVQdWTL3Twj7pB+sSKIH3KgUJVluSrPweJa2L7sBMu/HCmiDcg3MZRP3cn:jpp5AQdWTL3kj7pB+aIH3KgUJVl5d7aG

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  58413430697db301a2a490dbce0c7f30N.exe
- Size
  
  96KB
- MD5
  
  58413430697db301a2a490dbce0c7f30
- SHA1
  
  4677399f319888563ec56c4a7eb9c5c73e982cbd
- SHA256
  
  9f20aa8a80331e444d6db9d7f95cca50541739cd74c148da58f9484d609b550b
- SHA512
  
  1800583daf47638f7991951a9ae419a66020ab65f511a6f3477d10eb73ddb768df08d242a7a752ccc7b9373de1744f7b0551852e9d42f965f588b57aa7c9a675
- SSDEEP
  
  1536:jLWkp5iVQdWTL3Twj7pB+sSKIH3KgUJVluSrPweJa2L7sBMu/HCmiDcg3MZRP3cn:jpp5AQdWTL3kj7pB+aIH3KgUJVl5d7aG
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence