8ec4795d40fbb3ab8f9739a836b8dcd4548e2aa02a7b99826133af75ecc80bf7 | Triage

Sharing

General

Target

7cab00e4b7b3a71fa11747be72438020N.exe
Size

285KB
Sample

240727-b7kb7asbnd
MD5

7cab00e4b7b3a71fa11747be72438020
SHA1

5d703c161f357073cae7419f94fc77b8390ba673
SHA256

8ec4795d40fbb3ab8f9739a836b8dcd4548e2aa02a7b99826133af75ecc80bf7
SHA512

397b60171b3f8a442c4755cdb513a9b44c5f72460078964cfb7d9ccc97ae43ddd28e48da3c4645fbc9839f4c39e7ed532fd831a85d7a817a052d2d82a261d949
SSDEEP

6144:GjLwfWaYgASTYaT15f7o+STYaT15f6ZLXonvPeZaF8vs:GFaYKTYapJoTYapiMnOZ9

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7cab00e4b7b3a71fa11747be72438020N.exe
- Size
  
  285KB
- MD5
  
  7cab00e4b7b3a71fa11747be72438020
- SHA1
  
  5d703c161f357073cae7419f94fc77b8390ba673
- SHA256
  
  8ec4795d40fbb3ab8f9739a836b8dcd4548e2aa02a7b99826133af75ecc80bf7
- SHA512
  
  397b60171b3f8a442c4755cdb513a9b44c5f72460078964cfb7d9ccc97ae43ddd28e48da3c4645fbc9839f4c39e7ed532fd831a85d7a817a052d2d82a261d949
- SSDEEP
  
  6144:GjLwfWaYgASTYaT15f7o+STYaT15f6ZLXonvPeZaF8vs:GFaYKTYapJoTYapiMnOZ9
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence