c987da73984c66b0f39b6282cb1f0c43b7eed3ecb0afc1ffd1f7acf60a2332a8 | Triage

Sharing

General

Target

c10b7d463d83c39edd434194ccc10f50N.exe
Size

1.9MB
Sample

240817-mqzlbsvajq
MD5

c10b7d463d83c39edd434194ccc10f50
SHA1

83067eb1b57fa3bad4ced1fc42ae853789641a86
SHA256

c987da73984c66b0f39b6282cb1f0c43b7eed3ecb0afc1ffd1f7acf60a2332a8
SHA512

425cdb346483b99378b97510b937f8323775bacaeb66baaa553895b8414ac88cb890e508ccca1250aef29d58d98934df3f3239e821f16181e398813ee345d3e9
SSDEEP

24576:hM2FsPIvNIVyeNIVy2jUChONIVyeNIVy2jU6Y+uoHXNIVyeNIVy2jUChONIVyeN+:BOyjbByjA+SyjbByjH

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c10b7d463d83c39edd434194ccc10f50N.exe
- Size
  
  1.9MB
- MD5
  
  c10b7d463d83c39edd434194ccc10f50
- SHA1
  
  83067eb1b57fa3bad4ced1fc42ae853789641a86
- SHA256
  
  c987da73984c66b0f39b6282cb1f0c43b7eed3ecb0afc1ffd1f7acf60a2332a8
- SHA512
  
  425cdb346483b99378b97510b937f8323775bacaeb66baaa553895b8414ac88cb890e508ccca1250aef29d58d98934df3f3239e821f16181e398813ee345d3e9
- SSDEEP
  
  24576:hM2FsPIvNIVyeNIVy2jUChONIVyeNIVy2jU6Y+uoHXNIVyeNIVy2jUChONIVyeN+:BOyjbByjA+SyjbByjH
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence