0cdfded845e0e7bc7a66b25062bd639b500c8e31fd459484b7b04f51e76a7946 | Triage

Sharing

General

Target

bdc6412cefd9cf4b3f1a4b7623634bd0N.exe
Size

428KB
Sample

240802-vsfv1axdra
MD5

bdc6412cefd9cf4b3f1a4b7623634bd0
SHA1

0a40c571041b7b2c94950feeef6fa3b6dbce71e9
SHA256

0cdfded845e0e7bc7a66b25062bd639b500c8e31fd459484b7b04f51e76a7946
SHA512

47cac3f4d58b6fe7c7e6284431a4ae26e197750cb7ddea81ec8c43c98de0b289215c049bc25616d48b0d01c23bce64b7caf89cb87f04a1d4be8f4187b339d13b
SSDEEP

3072:fYzOq93PEIG1rZ8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd4e:IjFsr5ba4sFj5tPNki9HZd1sFj5tw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bdc6412cefd9cf4b3f1a4b7623634bd0N.exe
- Size
  
  428KB
- MD5
  
  bdc6412cefd9cf4b3f1a4b7623634bd0
- SHA1
  
  0a40c571041b7b2c94950feeef6fa3b6dbce71e9
- SHA256
  
  0cdfded845e0e7bc7a66b25062bd639b500c8e31fd459484b7b04f51e76a7946
- SHA512
  
  47cac3f4d58b6fe7c7e6284431a4ae26e197750cb7ddea81ec8c43c98de0b289215c049bc25616d48b0d01c23bce64b7caf89cb87f04a1d4be8f4187b339d13b
- SSDEEP
  
  3072:fYzOq93PEIG1rZ8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd4e:IjFsr5ba4sFj5tPNki9HZd1sFj5tw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence