edb19d14fc9673fea98cc7f3c89c5584b8c8ca03c8d4c0ff4e586fa1a995539e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e386bf62ad8d8eab0c5067dc3841a790N.exe
Size

72KB
Sample

240817-sv1bbasflf
MD5

e386bf62ad8d8eab0c5067dc3841a790
SHA1

cf1630c637cb1e3d772a923ea51b35d7066f21f9
SHA256

edb19d14fc9673fea98cc7f3c89c5584b8c8ca03c8d4c0ff4e586fa1a995539e
SHA512

fee27f6812c2d4ee1994318067c38c2d7d68f5626654d144d18b08f196027237924cfb0ebda82caf58fcad4c5efeb61d8413ec6d2c2d15e448b18f026ceb0d88
SSDEEP

1536:aOWnYIvZc5Zrm880xaO/jS8PgUN3QivEtA:hyYIm5dm8laGjPPgU5QJA

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e386bf62ad8d8eab0c5067dc3841a790N.exe
- Size
  
  72KB
- MD5
  
  e386bf62ad8d8eab0c5067dc3841a790
- SHA1
  
  cf1630c637cb1e3d772a923ea51b35d7066f21f9
- SHA256
  
  edb19d14fc9673fea98cc7f3c89c5584b8c8ca03c8d4c0ff4e586fa1a995539e
- SHA512
  
  fee27f6812c2d4ee1994318067c38c2d7d68f5626654d144d18b08f196027237924cfb0ebda82caf58fcad4c5efeb61d8413ec6d2c2d15e448b18f026ceb0d88
- SSDEEP
  
  1536:aOWnYIvZc5Zrm880xaO/jS8PgUN3QivEtA:hyYIm5dm8laGjPPgU5QJA
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence