94a2e4b9850acd8039024d2f40ce58b09c36592d5243c81a8a695b375c66a757 | Triage

Sharing

General

Target

d4d399b578641772edbd674a72a00880N.exe
Size

180KB
Sample

240806-wd9efayhmg
MD5

d4d399b578641772edbd674a72a00880
SHA1

b713d716c90310ac28e2b78663bf846629a49338
SHA256

94a2e4b9850acd8039024d2f40ce58b09c36592d5243c81a8a695b375c66a757
SHA512

2885d4e9fa3919f884372f138441537f8bb1bb8e74d57244bd224381496b91d03ca22b9d2696a28e5d57f197ed5b09375c22ad69acaeeedad800061e6b8c046b
SSDEEP

3072:FxclZO8999999999999991bea6miE6Wj4/glEeqZYLtLw32NX/qs/YTJv1tFk+F+:AlHeLdE6D/gaeFq32NX/qs/YTJ1tFk+8

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d4d399b578641772edbd674a72a00880N.exe
- Size
  
  180KB
- MD5
  
  d4d399b578641772edbd674a72a00880
- SHA1
  
  b713d716c90310ac28e2b78663bf846629a49338
- SHA256
  
  94a2e4b9850acd8039024d2f40ce58b09c36592d5243c81a8a695b375c66a757
- SHA512
  
  2885d4e9fa3919f884372f138441537f8bb1bb8e74d57244bd224381496b91d03ca22b9d2696a28e5d57f197ed5b09375c22ad69acaeeedad800061e6b8c046b
- SSDEEP
  
  3072:FxclZO8999999999999991bea6miE6Wj4/glEeqZYLtLw32NX/qs/YTJv1tFk+F+:AlHeLdE6D/gaeFq32NX/qs/YTJ1tFk+8
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence