5cc8b5d39c63e9721171aaacd040f79138e9e1475a3450bc16444418a9b14684 | Triage

Sharing

General

Target

c66458e64ed3d978ed87cd9ffbdd3a30N.exe
Size

192KB
Sample

240802-x4vveawhkr
MD5

c66458e64ed3d978ed87cd9ffbdd3a30
SHA1

3a49a0c70a811fd17b14bab89c6a12cbe8e0655c
SHA256

5cc8b5d39c63e9721171aaacd040f79138e9e1475a3450bc16444418a9b14684
SHA512

8455f67e54c7f27c6c5f7063ef6db56c09efb04568a83af363c76f6cbff2f27d203c672655ed219fbe7a141cd2e1707da924e68658038aa7696dd499197274ff
SSDEEP

3072:ikjPQlK0/+ACUq1vUry2B1xdLm102VZjuajDMyap9jCyFsWtex:iAkUACUovUry2B1xBm102VQltex

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c66458e64ed3d978ed87cd9ffbdd3a30N.exe
- Size
  
  192KB
- MD5
  
  c66458e64ed3d978ed87cd9ffbdd3a30
- SHA1
  
  3a49a0c70a811fd17b14bab89c6a12cbe8e0655c
- SHA256
  
  5cc8b5d39c63e9721171aaacd040f79138e9e1475a3450bc16444418a9b14684
- SHA512
  
  8455f67e54c7f27c6c5f7063ef6db56c09efb04568a83af363c76f6cbff2f27d203c672655ed219fbe7a141cd2e1707da924e68658038aa7696dd499197274ff
- SSDEEP
  
  3072:ikjPQlK0/+ACUq1vUry2B1xdLm102VZjuajDMyap9jCyFsWtex:iAkUACUovUry2B1xBm102VQltex
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence