90774b0d2b2eff78f90da1a7e7032ff7d598bf036cabb05958150f49e3130b54 | Triage

Sharing

General

Target

98fb302c6235ed1c7e9063ea2b85bed0N.exe
Size

896KB
Sample

240805-q5sywa1hkc
MD5

98fb302c6235ed1c7e9063ea2b85bed0
SHA1

20b4f87062904fbd2180f51e8e30793eb1b6fcd1
SHA256

90774b0d2b2eff78f90da1a7e7032ff7d598bf036cabb05958150f49e3130b54
SHA512

910a2f5638e40a4a49a5a543ec19d86f7782ee1de9963bae89634a1127df50c94fee0f2fbfa4b624af0658d4b8e87c33d1fca4ec45f148b319d226eb8011f135
SSDEEP

12288:8ZExByvNv54B9f01ZmHByvNv5VwLonfBHLqF1Nw5ILonfByvNv5HV:8Rvr4B9f01ZmQvrUENOVvr1

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  98fb302c6235ed1c7e9063ea2b85bed0N.exe
- Size
  
  896KB
- MD5
  
  98fb302c6235ed1c7e9063ea2b85bed0
- SHA1
  
  20b4f87062904fbd2180f51e8e30793eb1b6fcd1
- SHA256
  
  90774b0d2b2eff78f90da1a7e7032ff7d598bf036cabb05958150f49e3130b54
- SHA512
  
  910a2f5638e40a4a49a5a543ec19d86f7782ee1de9963bae89634a1127df50c94fee0f2fbfa4b624af0658d4b8e87c33d1fca4ec45f148b319d226eb8011f135
- SSDEEP
  
  12288:8ZExByvNv54B9f01ZmHByvNv5VwLonfBHLqF1Nw5ILonfByvNv5HV:8Rvr4B9f01ZmQvrUENOVvr1
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence