f5987e5a0dbe9d58ca565aa43b376ba847d70db2a2051902ad7fbbed237d610a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b509e50604853e0e318304fd3d6bd570N.exe
Size

405KB
Sample

240727-l9ngqstcrr
MD5

b509e50604853e0e318304fd3d6bd570
SHA1

ae164c550416533c6aa85b04865b2e11b1903f81
SHA256

f5987e5a0dbe9d58ca565aa43b376ba847d70db2a2051902ad7fbbed237d610a
SHA512

41bd968fc4084c4b2764d0460a4a05b5bcdf54ff56d6e52650755e48f48a758771f3c6a4f02404a78b262f9249386e23edf16239004a13b51e788a57f9a4831b
SSDEEP

12288:CxIK9V14ImyHYLtAQIa4lW91A7NgGPHUv2jrIZmRoM1xI:CJEyY8a4lk1A7NgGPH42jreAI

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  b509e50604853e0e318304fd3d6bd570N.exe
- Size
  
  405KB
- MD5
  
  b509e50604853e0e318304fd3d6bd570
- SHA1
  
  ae164c550416533c6aa85b04865b2e11b1903f81
- SHA256
  
  f5987e5a0dbe9d58ca565aa43b376ba847d70db2a2051902ad7fbbed237d610a
- SHA512
  
  41bd968fc4084c4b2764d0460a4a05b5bcdf54ff56d6e52650755e48f48a758771f3c6a4f02404a78b262f9249386e23edf16239004a13b51e788a57f9a4831b
- SSDEEP
  
  12288:CxIK9V14ImyHYLtAQIa4lW91A7NgGPHUv2jrIZmRoM1xI:CJEyY8a4lk1A7NgGPH42jreAI
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence