dbb9e85a5d28081391a10e30f12b00ae6603ac67a4cf634f2615fc43bc1c76c8 | Triage

Sharing

General

Target

8e97f17f2ea9529686ecbb15768fe0d0N.exe
Size

464KB
Sample

240814-cw1qgavejh
MD5

8e97f17f2ea9529686ecbb15768fe0d0
SHA1

a4ad822054b216b31c192169113d5c2b35f9bf05
SHA256

dbb9e85a5d28081391a10e30f12b00ae6603ac67a4cf634f2615fc43bc1c76c8
SHA512

e4408535072f1103ff4a81dda03e7dbbb8d59c51d70b921c627bf5fcf620215511d6d49d0e6b139996b76f8b92929ffd0a12e4836632f0804816b503bc4f5b33
SSDEEP

12288:VENno9OCuah2kkkkK4kXkkkkkkkkl888888888888888888nusG:VENnjnah2kkkkK4kXkkkkkkkkK

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8e97f17f2ea9529686ecbb15768fe0d0N.exe
- Size
  
  464KB
- MD5
  
  8e97f17f2ea9529686ecbb15768fe0d0
- SHA1
  
  a4ad822054b216b31c192169113d5c2b35f9bf05
- SHA256
  
  dbb9e85a5d28081391a10e30f12b00ae6603ac67a4cf634f2615fc43bc1c76c8
- SHA512
  
  e4408535072f1103ff4a81dda03e7dbbb8d59c51d70b921c627bf5fcf620215511d6d49d0e6b139996b76f8b92929ffd0a12e4836632f0804816b503bc4f5b33
- SSDEEP
  
  12288:VENno9OCuah2kkkkK4kXkkkkkkkkl888888888888888888nusG:VENnjnah2kkkkK4kXkkkkkkkkK
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence