57a2156b46ae36416d50f9997b71ea9a5b64c854ac50de0d9c113ca3ff9d7425 | Triage

Sharing

General

Target

7d6d139e9140e6212a409e3b431c5550N.exe
Size

233KB
Sample

240802-kh6nkatcpj
MD5

7d6d139e9140e6212a409e3b431c5550
SHA1

405a6893b0d0c53198ae2f91faa934a7be15c8b8
SHA256

57a2156b46ae36416d50f9997b71ea9a5b64c854ac50de0d9c113ca3ff9d7425
SHA512

1a8b68622cfc70aebe88606044f6d63dfb8a561d3d56f81fcce5b8ad75fde9f874df1d51f7e17ae71b77816e41d2b483d17d5fb3d3740b69e1a1ed992d5325a9
SSDEEP

6144:qkhwss2VXisq8fRKB3A4U2dga1mcyw7I6BjtCYYs2:e9/y5WHR1mK7fVtXP2

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7d6d139e9140e6212a409e3b431c5550N.exe
- Size
  
  233KB
- MD5
  
  7d6d139e9140e6212a409e3b431c5550
- SHA1
  
  405a6893b0d0c53198ae2f91faa934a7be15c8b8
- SHA256
  
  57a2156b46ae36416d50f9997b71ea9a5b64c854ac50de0d9c113ca3ff9d7425
- SHA512
  
  1a8b68622cfc70aebe88606044f6d63dfb8a561d3d56f81fcce5b8ad75fde9f874df1d51f7e17ae71b77816e41d2b483d17d5fb3d3740b69e1a1ed992d5325a9
- SSDEEP
  
  6144:qkhwss2VXisq8fRKB3A4U2dga1mcyw7I6BjtCYYs2:e9/y5WHR1mK7fVtXP2
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence