3804d4879a194e7a15244c7129c1f8ee99252c5ae6ab773c4fffea8bd5b75ca9 | Triage

Sharing

General

Target

b1d38e9d87a98fcd9369ced4219dd570N.exe
Size

327KB
Sample

240817-1lb65aydkh
MD5

b1d38e9d87a98fcd9369ced4219dd570
SHA1

b653176ca29b482155b1ecb2bbbe60d4b65696c1
SHA256

3804d4879a194e7a15244c7129c1f8ee99252c5ae6ab773c4fffea8bd5b75ca9
SHA512

157553ad6a10a3d07954e3395962c23aabfd37ee664eb357a102046bf28f8d160731abc0a481e1f955ef3966d67fad06664290c83a36e3dd2a981c417065f6aa
SSDEEP

3072:5SwE6WVKDUPBCG8qG4zWYCEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESLjb5m0t42:57rWV+UEG8qXKUj0+r+Mds9BY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1d38e9d87a98fcd9369ced4219dd570N.exe
- Size
  
  327KB
- MD5
  
  b1d38e9d87a98fcd9369ced4219dd570
- SHA1
  
  b653176ca29b482155b1ecb2bbbe60d4b65696c1
- SHA256
  
  3804d4879a194e7a15244c7129c1f8ee99252c5ae6ab773c4fffea8bd5b75ca9
- SHA512
  
  157553ad6a10a3d07954e3395962c23aabfd37ee664eb357a102046bf28f8d160731abc0a481e1f955ef3966d67fad06664290c83a36e3dd2a981c417065f6aa
- SSDEEP
  
  3072:5SwE6WVKDUPBCG8qG4zWYCEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESLjb5m0t42:57rWV+UEG8qXKUj0+r+Mds9BY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence