91776527363732a1143c1134315daf6d0a8e8a9ff08d73528f4e4e60be0214ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a51b9490bf84fcc2b23823c95779220N.exe
Size

63KB
Sample

240814-qgvskayemq
MD5

6a51b9490bf84fcc2b23823c95779220
SHA1

0a6e98a93ae877c564cd30da042043f18da1c454
SHA256

91776527363732a1143c1134315daf6d0a8e8a9ff08d73528f4e4e60be0214ca
SHA512

c542355bcd5725931c4b589973d2ae8a85b454eda631c79e2d74334e769c342bfac81fa3c6b1cd4a6f84972fa0fa6aa490c5bdc163f44db98546200cfbce2220
SSDEEP

1536:uRUwieJw9QpHfgrOvPOrwaZKQb5i9m2WH1juIZo:uhXJPgrOvPOsaZKQ5i9mTH1juIZo

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6a51b9490bf84fcc2b23823c95779220N.exe
- Size
  
  63KB
- MD5
  
  6a51b9490bf84fcc2b23823c95779220
- SHA1
  
  0a6e98a93ae877c564cd30da042043f18da1c454
- SHA256
  
  91776527363732a1143c1134315daf6d0a8e8a9ff08d73528f4e4e60be0214ca
- SHA512
  
  c542355bcd5725931c4b589973d2ae8a85b454eda631c79e2d74334e769c342bfac81fa3c6b1cd4a6f84972fa0fa6aa490c5bdc163f44db98546200cfbce2220
- SSDEEP
  
  1536:uRUwieJw9QpHfgrOvPOrwaZKQb5i9m2WH1juIZo:uhXJPgrOvPOsaZKQ5i9mTH1juIZo
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence