2dd9c24cfa3063fd3939ab22c4040e9152754fb849688e0e916082e370d5cc6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64ef0bbe02fde4ec80cc2f9455590b30N.exe
Size

62KB
Sample

240807-e88mysvcng
MD5

64ef0bbe02fde4ec80cc2f9455590b30
SHA1

951c2dffbfb4c782b89688cae1adf5c56b5d14d8
SHA256

2dd9c24cfa3063fd3939ab22c4040e9152754fb849688e0e916082e370d5cc6c
SHA512

6adb09647de0d7440699ef967907df649913fd60161d425fbe20c92067dfb6ef9c2b93765ad8d6ff50da4821d7b29922601b762db26b0b62cb248341d3791ebf
SSDEEP

1536:s1qacoGM1hCFb24wyRWY1ddcIxdcYHGNMVR8PpyEve8Cy:IlcM1hC12GWYDyIxdg5Ppdve8

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  64ef0bbe02fde4ec80cc2f9455590b30N.exe
- Size
  
  62KB
- MD5
  
  64ef0bbe02fde4ec80cc2f9455590b30
- SHA1
  
  951c2dffbfb4c782b89688cae1adf5c56b5d14d8
- SHA256
  
  2dd9c24cfa3063fd3939ab22c4040e9152754fb849688e0e916082e370d5cc6c
- SHA512
  
  6adb09647de0d7440699ef967907df649913fd60161d425fbe20c92067dfb6ef9c2b93765ad8d6ff50da4821d7b29922601b762db26b0b62cb248341d3791ebf
- SSDEEP
  
  1536:s1qacoGM1hCFb24wyRWY1ddcIxdcYHGNMVR8PpyEve8Cy:IlcM1hC12GWYDyIxdg5Ppdve8
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence