85c709e35d01c5e1b73bcf74ae84132b1e2c55036541515aa8439d4d2b451e9c | Triage

Sharing

General

Target

c54c3ad6aa4bc69cb53eee1791e7fe50N.exe
Size

176KB
Sample

240817-abb59svfpc
MD5

c54c3ad6aa4bc69cb53eee1791e7fe50
SHA1

03074c5a30b706187d69ba7f922c5e81a3219c23
SHA256

85c709e35d01c5e1b73bcf74ae84132b1e2c55036541515aa8439d4d2b451e9c
SHA512

9a788e55e59dd9a58461ab5aa24e448d7db24d0b078ee51a61b6d33aa657953823179c86a0f3f8341cb8e3d5671911fb9765dd09f80ad4b370af8bb044e822ff
SSDEEP

3072:+Ab7QnDz3t1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIckJI:+AInDz3t1nTZ9EaUn4yjK99QQd

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c54c3ad6aa4bc69cb53eee1791e7fe50N.exe
- Size
  
  176KB
- MD5
  
  c54c3ad6aa4bc69cb53eee1791e7fe50
- SHA1
  
  03074c5a30b706187d69ba7f922c5e81a3219c23
- SHA256
  
  85c709e35d01c5e1b73bcf74ae84132b1e2c55036541515aa8439d4d2b451e9c
- SHA512
  
  9a788e55e59dd9a58461ab5aa24e448d7db24d0b078ee51a61b6d33aa657953823179c86a0f3f8341cb8e3d5671911fb9765dd09f80ad4b370af8bb044e822ff
- SSDEEP
  
  3072:+Ab7QnDz3t1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIckJI:+AInDz3t1nTZ9EaUn4yjK99QQd
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence