40d6dd0e3b4c5c07ec0f6a52d858ac0cbcd1a68699497aa86d8ee0a66d13664d | Triage

Sharing

General

Target

e089d94cbb678247fb602e631e796840N.exe
Size

80KB
Sample

240817-cgt95s1djb
MD5

e089d94cbb678247fb602e631e796840
SHA1

732df5382c870a56d99d1b158354a488d437a17d
SHA256

40d6dd0e3b4c5c07ec0f6a52d858ac0cbcd1a68699497aa86d8ee0a66d13664d
SHA512

d22e8df862ccadbe18726d98aeb0c35596d1d8f203b0dd3878b02b0a9f4f47d3628148bdbcee5889e6c67eac8544cc0990b8b3f8801e0da364c02cc4c898af60
SSDEEP

1536:DOVG0ch8X1bg7HPKWM1uVdLsnR85YMkhohBE8VGh:DOs0j9grZ6nRoUAEQGh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e089d94cbb678247fb602e631e796840N.exe
- Size
  
  80KB
- MD5
  
  e089d94cbb678247fb602e631e796840
- SHA1
  
  732df5382c870a56d99d1b158354a488d437a17d
- SHA256
  
  40d6dd0e3b4c5c07ec0f6a52d858ac0cbcd1a68699497aa86d8ee0a66d13664d
- SHA512
  
  d22e8df862ccadbe18726d98aeb0c35596d1d8f203b0dd3878b02b0a9f4f47d3628148bdbcee5889e6c67eac8544cc0990b8b3f8801e0da364c02cc4c898af60
- SSDEEP
  
  1536:DOVG0ch8X1bg7HPKWM1uVdLsnR85YMkhohBE8VGh:DOs0j9grZ6nRoUAEQGh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence