e1b7d8a26db9f46484022c43bcbc6caaf9cf076be145cd8333e60712cc720631 | Triage

Sharing

General

Target

a2f5376a133d6a2979dcb688c3ce4fc0N.exe
Size

1000KB
Sample

240817-pbg4vavbnh
MD5

a2f5376a133d6a2979dcb688c3ce4fc0
SHA1

cca6094b9482288020bde8500201023dfec592f3
SHA256

e1b7d8a26db9f46484022c43bcbc6caaf9cf076be145cd8333e60712cc720631
SHA512

db837e6be53c7041869746131cdd0d2c7a878cf9bd95a6dca50edaf581f94fdf6b9a5427a2f75726669a80e5db241dd89033690afa5b223f87feed281000b28e
SSDEEP

6144:w2bFG9Y9xDHBFLqWjjgwTgZLnSnLrTSxJ2JrYXklSu9lIhBBJKQh31GTYUCIIYy7:x7tHBFLPj3TmLnWrOxNuxC97hFq9o7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a2f5376a133d6a2979dcb688c3ce4fc0N.exe
- Size
  
  1000KB
- MD5
  
  a2f5376a133d6a2979dcb688c3ce4fc0
- SHA1
  
  cca6094b9482288020bde8500201023dfec592f3
- SHA256
  
  e1b7d8a26db9f46484022c43bcbc6caaf9cf076be145cd8333e60712cc720631
- SHA512
  
  db837e6be53c7041869746131cdd0d2c7a878cf9bd95a6dca50edaf581f94fdf6b9a5427a2f75726669a80e5db241dd89033690afa5b223f87feed281000b28e
- SSDEEP
  
  6144:w2bFG9Y9xDHBFLqWjjgwTgZLnSnLrTSxJ2JrYXklSu9lIhBBJKQh31GTYUCIIYy7:x7tHBFLPj3TmLnWrOxNuxC97hFq9o7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence