60ebf80fafbf5670e0adc769bbf4e6ac469d38904ba40bb3a38404480325a256 | Triage

Sharing

General

Target

d833581b35e14947ed1695a6cfa6cfe0N.exe
Size

1.2MB
Sample

240806-w6vfzszfqb
MD5

d833581b35e14947ed1695a6cfa6cfe0
SHA1

81d864c934b3a52aafc9d28fb5a710d3557115a2
SHA256

60ebf80fafbf5670e0adc769bbf4e6ac469d38904ba40bb3a38404480325a256
SHA512

de0e261386a264e29b2f652b0555badc998e326b7d5cef1bf92010a13aecdf77fb0a9c2ec3a2f46d59c24b9260f6a6c3d9f722dbe46c885408e6f52b96f9a5fd
SSDEEP

12288:uL09bEdPC6vIDVqvQ6Ivxv26IveDVqvQ6IvpW1nvv6IveDVqvQ6IvYvc6IveDVqT:uE5hwq5hVW1nq5h3q5hL6X1q5h3q5h

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d833581b35e14947ed1695a6cfa6cfe0N.exe
- Size
  
  1.2MB
- MD5
  
  d833581b35e14947ed1695a6cfa6cfe0
- SHA1
  
  81d864c934b3a52aafc9d28fb5a710d3557115a2
- SHA256
  
  60ebf80fafbf5670e0adc769bbf4e6ac469d38904ba40bb3a38404480325a256
- SHA512
  
  de0e261386a264e29b2f652b0555badc998e326b7d5cef1bf92010a13aecdf77fb0a9c2ec3a2f46d59c24b9260f6a6c3d9f722dbe46c885408e6f52b96f9a5fd
- SSDEEP
  
  12288:uL09bEdPC6vIDVqvQ6Ivxv26IveDVqvQ6IvpW1nvv6IveDVqvQ6IvYvc6IveDVqT:uE5hwq5hVW1nq5h3q5hL6X1q5h3q5h
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence