7c36312e0658616281ee26728aa52b88dff2ebfe4a708c9ecda6f7b9962ef8ea | Triage

Sharing

General

Target

50687bb3b318b7048c8a171819d391f0N.exe
Size

90KB
Sample

240802-empmyszbra
MD5

50687bb3b318b7048c8a171819d391f0
SHA1

cbb71a5127f1359ebdf12459f2915924400e4d48
SHA256

7c36312e0658616281ee26728aa52b88dff2ebfe4a708c9ecda6f7b9962ef8ea
SHA512

6cc3ace69af18555fce0fa67683e232739eb054640530520ce79d07459b83cbb5d13ba39ebc09aa5fa57bc341b3300c8ba14b6003451912cc69169b4491c8afb
SSDEEP

1536:RlcHSKpT6X1trRNOV8+17Xj5jXYBXOfOOQ/4BrGTI5Yxj:RCEX1trfOjTJYBaU/4kT0Yxj

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  50687bb3b318b7048c8a171819d391f0N.exe
- Size
  
  90KB
- MD5
  
  50687bb3b318b7048c8a171819d391f0
- SHA1
  
  cbb71a5127f1359ebdf12459f2915924400e4d48
- SHA256
  
  7c36312e0658616281ee26728aa52b88dff2ebfe4a708c9ecda6f7b9962ef8ea
- SHA512
  
  6cc3ace69af18555fce0fa67683e232739eb054640530520ce79d07459b83cbb5d13ba39ebc09aa5fa57bc341b3300c8ba14b6003451912cc69169b4491c8afb
- SSDEEP
  
  1536:RlcHSKpT6X1trRNOV8+17Xj5jXYBXOfOOQ/4BrGTI5Yxj:RCEX1trfOjTJYBaU/4kT0Yxj
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence