372db098fc23bbdc827f1269af91605108aa29700d9160e959fea4351597f20a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1baf8d1b753a054df26e3f7d2d4f510N.exe
Size

296KB
Sample

240817-s5pybswekl
MD5

b1baf8d1b753a054df26e3f7d2d4f510
SHA1

f0f4db090ccb6e2dc9fe6f3fcb93c6a7f3cde2e1
SHA256

372db098fc23bbdc827f1269af91605108aa29700d9160e959fea4351597f20a
SHA512

d8435d71b8b0b1fef0585aed350942539000fb066e095657c1d28f034e2a98bedd2434390709b5e2adff1cf0978c3a5ab1147d0175c486bdc464ffca41072bc0
SSDEEP

3072:c433oRljGh5iYDBwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwKwww2Cwwuwwwwwwwg:csKxA5iYDK0ANPKG6g

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b1baf8d1b753a054df26e3f7d2d4f510N.exe
- Size
  
  296KB
- MD5
  
  b1baf8d1b753a054df26e3f7d2d4f510
- SHA1
  
  f0f4db090ccb6e2dc9fe6f3fcb93c6a7f3cde2e1
- SHA256
  
  372db098fc23bbdc827f1269af91605108aa29700d9160e959fea4351597f20a
- SHA512
  
  d8435d71b8b0b1fef0585aed350942539000fb066e095657c1d28f034e2a98bedd2434390709b5e2adff1cf0978c3a5ab1147d0175c486bdc464ffca41072bc0
- SSDEEP
  
  3072:c433oRljGh5iYDBwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwKwww2Cwwuwwwwwwwg:csKxA5iYDK0ANPKG6g
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence