89f4e6f1349badca84ff70c92de9a6b41c705bf728f6f2dd9f7364dba882ec28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ee8e7efead23d42242afed7fd7268ea0N.exe
Size

224KB
Sample

240813-2173sa1apg
MD5

ee8e7efead23d42242afed7fd7268ea0
SHA1

cb39ab6699eef01030055d06f93c5d2708787887
SHA256

89f4e6f1349badca84ff70c92de9a6b41c705bf728f6f2dd9f7364dba882ec28
SHA512

fece6cb26082a9fcf57f80ae2901438088d1f3fbdebc146097ead1176ec995912eb055510b83584dc3385ce5b6d5d69fb5f1a98183d36426a4f8d77120662bc4
SSDEEP

3072:qxTi64IoN7twbmtu6FIBs2B1xdLm102VZjuajDMyap9jCyFsWteYCWS3:qxTiFZ7tc1oAs2B1xBm102VQlter

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ee8e7efead23d42242afed7fd7268ea0N.exe
- Size
  
  224KB
- MD5
  
  ee8e7efead23d42242afed7fd7268ea0
- SHA1
  
  cb39ab6699eef01030055d06f93c5d2708787887
- SHA256
  
  89f4e6f1349badca84ff70c92de9a6b41c705bf728f6f2dd9f7364dba882ec28
- SHA512
  
  fece6cb26082a9fcf57f80ae2901438088d1f3fbdebc146097ead1176ec995912eb055510b83584dc3385ce5b6d5d69fb5f1a98183d36426a4f8d77120662bc4
- SSDEEP
  
  3072:qxTi64IoN7twbmtu6FIBs2B1xdLm102VZjuajDMyap9jCyFsWteYCWS3:qxTiFZ7tc1oAs2B1xBm102VQlter
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence