f9b767d568ebb58859118c0ddcceb512c40ce8ae79f10919e8be66b7fd05a69e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b06499b9492d5d3899fff40da4391f0N.exe
Size

272KB
Sample

240817-jxsjtaydjr
MD5

8b06499b9492d5d3899fff40da4391f0
SHA1

48218b9feaf70cc16b46ee4f6cfff47661c599b2
SHA256

f9b767d568ebb58859118c0ddcceb512c40ce8ae79f10919e8be66b7fd05a69e
SHA512

4e0b5c2562ca283ae021fa83851f69cb96988e13f391143124725d9715736f2d34f0b0f59fc2a1f36a1b9d4bd9b617fc574ad2d3120aca7211f0c63c6a4c1daf
SSDEEP

6144:Vcu9D2jvosK6mUzW0jAWRD2jvosK6mUzWJEmQ/xvL:V1x67fLx67+dQ/h

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8b06499b9492d5d3899fff40da4391f0N.exe
- Size
  
  272KB
- MD5
  
  8b06499b9492d5d3899fff40da4391f0
- SHA1
  
  48218b9feaf70cc16b46ee4f6cfff47661c599b2
- SHA256
  
  f9b767d568ebb58859118c0ddcceb512c40ce8ae79f10919e8be66b7fd05a69e
- SHA512
  
  4e0b5c2562ca283ae021fa83851f69cb96988e13f391143124725d9715736f2d34f0b0f59fc2a1f36a1b9d4bd9b617fc574ad2d3120aca7211f0c63c6a4c1daf
- SSDEEP
  
  6144:Vcu9D2jvosK6mUzW0jAWRD2jvosK6mUzWJEmQ/xvL:V1x67fLx67+dQ/h
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence