fa657b0e187b1c82570b67b38569e4fca8981f72b8e7a6073b4c70524bdfda9d | Triage

Sharing

General

Target

9dfe5312a94b4669df4c03c9b9e99970N.exe
Size

2.7MB
Sample

240807-lhx7vszcqb
MD5

9dfe5312a94b4669df4c03c9b9e99970
SHA1

f28465e56a254e9e85978b473b920d7e89c658ab
SHA256

fa657b0e187b1c82570b67b38569e4fca8981f72b8e7a6073b4c70524bdfda9d
SHA512

c28f218a92bae68a44a88a65bcc0e6a7c50f0d1982b25cc2eecddb555cee85a614c303458eea8652c49dad07fce032ac0bce27eff69c116839e1f79307cddd62
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBi9w4Sx:+R0pI/IQlUoMPdmpSps4

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  9dfe5312a94b4669df4c03c9b9e99970N.exe
- Size
  
  2.7MB
- MD5
  
  9dfe5312a94b4669df4c03c9b9e99970
- SHA1
  
  f28465e56a254e9e85978b473b920d7e89c658ab
- SHA256
  
  fa657b0e187b1c82570b67b38569e4fca8981f72b8e7a6073b4c70524bdfda9d
- SHA512
  
  c28f218a92bae68a44a88a65bcc0e6a7c50f0d1982b25cc2eecddb555cee85a614c303458eea8652c49dad07fce032ac0bce27eff69c116839e1f79307cddd62
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBi9w4Sx:+R0pI/IQlUoMPdmpSps4
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence