8399f802b10eb8524aa6313565d202e74ac0e01ae6d308ca43d431083a2d3d5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c71d0c83a43cff66e356501fa455f880N.exe
Size

408KB
Sample

240805-x63m2awcnr
MD5

c71d0c83a43cff66e356501fa455f880
SHA1

5d4e610469f1b1d509474442f22bdde2c4fd1579
SHA256

8399f802b10eb8524aa6313565d202e74ac0e01ae6d308ca43d431083a2d3d5e
SHA512

ed85761e15e7b6d4b76b8c4a7d04b2bf9cb5a8c5161330a38c69fc98814dbefec5c8abc40eb24adec449d04395fccd5ab4e39ba8165e13a46d227203ba7e29c8
SSDEEP

6144:DFIu4qXOFeHIAGbM2yJT///NR5f7DM2y/JAQ///NR5fLYGv:DoqXOIoM1z/NzDMTx/NcY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c71d0c83a43cff66e356501fa455f880N.exe
- Size
  
  408KB
- MD5
  
  c71d0c83a43cff66e356501fa455f880
- SHA1
  
  5d4e610469f1b1d509474442f22bdde2c4fd1579
- SHA256
  
  8399f802b10eb8524aa6313565d202e74ac0e01ae6d308ca43d431083a2d3d5e
- SHA512
  
  ed85761e15e7b6d4b76b8c4a7d04b2bf9cb5a8c5161330a38c69fc98814dbefec5c8abc40eb24adec449d04395fccd5ab4e39ba8165e13a46d227203ba7e29c8
- SSDEEP
  
  6144:DFIu4qXOFeHIAGbM2yJT///NR5f7DM2y/JAQ///NR5fLYGv:DoqXOIoM1z/NzDMTx/NcY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence