e45dd9fe28f03a0c5304111ed9b8dd3d53b667c03a9266584d538e076dfc0cf2 | Triage

Sharing

General

Target

30a25301e1cac767cf2157ab64b15610N.exe
Size

273KB
Sample

240807-aetjqavdmp
MD5

30a25301e1cac767cf2157ab64b15610
SHA1

a62e626310acfeff1da774e67a6eb57d3f3fabd6
SHA256

e45dd9fe28f03a0c5304111ed9b8dd3d53b667c03a9266584d538e076dfc0cf2
SHA512

4b87cc248e4942629b5b7df41cd6e50f28624bf6cf4f4a887d5ec76c2086ce0a1a37b780db2fcd5553de075777cca2c6f3bd04685117266a77a7fd93a7c675ee
SSDEEP

3072:JaUFMooI24ho1mtye3l7RpupU50EOZs24ho1mtye3laBA+0FbTgsGH24ho1mtye1:EUGFFsF7RpN50nZBsFaBMf4UsF

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  30a25301e1cac767cf2157ab64b15610N.exe
- Size
  
  273KB
- MD5
  
  30a25301e1cac767cf2157ab64b15610
- SHA1
  
  a62e626310acfeff1da774e67a6eb57d3f3fabd6
- SHA256
  
  e45dd9fe28f03a0c5304111ed9b8dd3d53b667c03a9266584d538e076dfc0cf2
- SHA512
  
  4b87cc248e4942629b5b7df41cd6e50f28624bf6cf4f4a887d5ec76c2086ce0a1a37b780db2fcd5553de075777cca2c6f3bd04685117266a77a7fd93a7c675ee
- SSDEEP
  
  3072:JaUFMooI24ho1mtye3l7RpupU50EOZs24ho1mtye3laBA+0FbTgsGH24ho1mtye1:EUGFFsF7RpN50nZBsFaBMf4UsF
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence