2b491df0818e16fc211bcc74bd8707f26739b08978490f2a272c42aa3cd00016 | Triage

Sharing

General

Target

bfdac05d10d6d64d26ba40197598a640N.exe
Size

446KB
Sample

240814-cvhs9svdrf
MD5

bfdac05d10d6d64d26ba40197598a640
SHA1

18a5c87ee8afba361ab1545d927d1782f4f4ad96
SHA256

2b491df0818e16fc211bcc74bd8707f26739b08978490f2a272c42aa3cd00016
SHA512

8b4a8b007ca335686b45666af42bbcac5239d3f164a7dc2d9ecf2f0c2538ba44bbda01828586b9fa19b44a300b00e10595af858bcda9b8c2cbf6aaee87d7ac13
SSDEEP

6144:ej4dOPOwXYrMdlvkGr0f+uPOwXYrMdlsLS7De:DnwIaJwIdSy

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bfdac05d10d6d64d26ba40197598a640N.exe
- Size
  
  446KB
- MD5
  
  bfdac05d10d6d64d26ba40197598a640
- SHA1
  
  18a5c87ee8afba361ab1545d927d1782f4f4ad96
- SHA256
  
  2b491df0818e16fc211bcc74bd8707f26739b08978490f2a272c42aa3cd00016
- SHA512
  
  8b4a8b007ca335686b45666af42bbcac5239d3f164a7dc2d9ecf2f0c2538ba44bbda01828586b9fa19b44a300b00e10595af858bcda9b8c2cbf6aaee87d7ac13
- SSDEEP
  
  6144:ej4dOPOwXYrMdlvkGr0f+uPOwXYrMdlsLS7De:DnwIaJwIdSy
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence