ee87bf3880af866a96918ed450781c145bdf117a91e61924795dfbe407b8955e | Triage

Sharing

General

Target

a1c95c688adfdd37201d0819422a5880N.exe
Size

207KB
Sample

240806-pcqsdasfnb
MD5

a1c95c688adfdd37201d0819422a5880
SHA1

a95d207c1240694e28546dac7ac6a8e9eabf3af0
SHA256

ee87bf3880af866a96918ed450781c145bdf117a91e61924795dfbe407b8955e
SHA512

415cdd4124ae297690f0c41c12e202fa93c54b27738ffc6a71feb384ed92c877e6059cb936aa9751f0e3e33ec6ae5985dd162ec6ca29dc933f77f9336531fe4e
SSDEEP

6144:hSOBfn2ofccBiax8JPVjj+VPj92d62ASOwj:A+fn2YccBiampIPj92aSOc

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a1c95c688adfdd37201d0819422a5880N.exe
- Size
  
  207KB
- MD5
  
  a1c95c688adfdd37201d0819422a5880
- SHA1
  
  a95d207c1240694e28546dac7ac6a8e9eabf3af0
- SHA256
  
  ee87bf3880af866a96918ed450781c145bdf117a91e61924795dfbe407b8955e
- SHA512
  
  415cdd4124ae297690f0c41c12e202fa93c54b27738ffc6a71feb384ed92c877e6059cb936aa9751f0e3e33ec6ae5985dd162ec6ca29dc933f77f9336531fe4e
- SSDEEP
  
  6144:hSOBfn2ofccBiax8JPVjj+VPj92d62ASOwj:A+fn2YccBiampIPj92aSOc
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence