0f0dc3dfd264219169d2f69166e63595b06a312bb7ece0d602bfb58596e52209 | Triage

Sharing

General

Target

d593383d45ba95addd15941d8cf6d850N.exe
Size

74KB
Sample

240806-wjmsmawalq
MD5

d593383d45ba95addd15941d8cf6d850
SHA1

90447a07105187e201169fcbb5f52337a05e7415
SHA256

0f0dc3dfd264219169d2f69166e63595b06a312bb7ece0d602bfb58596e52209
SHA512

d140bc92899ad8ea47b4350389f5fa2c3eda5a432bdd8895f98a108cdd678251db02a878dd7cbf3e929ae2b3b371d5564c99602bb99113110289b6d6b65b2aa6
SSDEEP

1536:ypHQSsM9yb62OJkMcqe4G6fplWtkl2G8cu+QWpjApBVKa:UHQSs2c62ckMC+lYcu+IBIa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d593383d45ba95addd15941d8cf6d850N.exe
- Size
  
  74KB
- MD5
  
  d593383d45ba95addd15941d8cf6d850
- SHA1
  
  90447a07105187e201169fcbb5f52337a05e7415
- SHA256
  
  0f0dc3dfd264219169d2f69166e63595b06a312bb7ece0d602bfb58596e52209
- SHA512
  
  d140bc92899ad8ea47b4350389f5fa2c3eda5a432bdd8895f98a108cdd678251db02a878dd7cbf3e929ae2b3b371d5564c99602bb99113110289b6d6b65b2aa6
- SSDEEP
  
  1536:ypHQSsM9yb62OJkMcqe4G6fplWtkl2G8cu+QWpjApBVKa:UHQSs2c62ckMC+lYcu+IBIa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence