6899fdfaac981ea1893c3692cdc67c6b0807a3c326d6c886fae76765c180bbb8 | Triage

Sharing

General

Target

ebc97dfe87a3ce8f405ec2342f3a5900N.exe
Size

71KB
Sample

240817-sx2bdssgmc
MD5

ebc97dfe87a3ce8f405ec2342f3a5900
SHA1

87ec1c6f98f45f99de0358eb55fc6d9d2c2168bf
SHA256

6899fdfaac981ea1893c3692cdc67c6b0807a3c326d6c886fae76765c180bbb8
SHA512

b15d5d41377696dd4e8ef382bc339b10a365dc127cf18c699d7439cd5f4e1cd60dedcd9681b8bfa58736cb018913763940e91b2e8feb76b0ad3dfe49a9c2eb1b
SSDEEP

1536:GBWWshnqMzhUPxIB3gGnkLIAEkrIsRQJ2K1P+ATT:lWCnqNJXGkLqbsenP+A3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ebc97dfe87a3ce8f405ec2342f3a5900N.exe
- Size
  
  71KB
- MD5
  
  ebc97dfe87a3ce8f405ec2342f3a5900
- SHA1
  
  87ec1c6f98f45f99de0358eb55fc6d9d2c2168bf
- SHA256
  
  6899fdfaac981ea1893c3692cdc67c6b0807a3c326d6c886fae76765c180bbb8
- SHA512
  
  b15d5d41377696dd4e8ef382bc339b10a365dc127cf18c699d7439cd5f4e1cd60dedcd9681b8bfa58736cb018913763940e91b2e8feb76b0ad3dfe49a9c2eb1b
- SSDEEP
  
  1536:GBWWshnqMzhUPxIB3gGnkLIAEkrIsRQJ2K1P+ATT:lWCnqNJXGkLqbsenP+A3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence