805f3d5f135fda75536a9e0db85712f3edf556a3e243443785ee8d265adaf0ba | Triage

Sharing

General

Target

9baeed8c0e070891bc5d9963ce5ff280N.exe
Size

109KB
Sample

240817-t7fywawakc
MD5

9baeed8c0e070891bc5d9963ce5ff280
SHA1

6966e969a11d1f9eee731ce408517f6e79a22e8f
SHA256

805f3d5f135fda75536a9e0db85712f3edf556a3e243443785ee8d265adaf0ba
SHA512

0df7d104c6c0f1fc960878e251dc632d8e215522a45e7d0d8fedfc315f8365c474e5747c0bb933262c5d270044c314e858df0c073c832f9835ce0aa8b480859e
SSDEEP

3072:1/me2Pm/qWshgESM0dPvO7MbDdvJ95LCqwzBu1DjHLMVDqqkSpR:1OeQhIfdPvO7Mb5vJ9Bwtu1DjrFqhz

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9baeed8c0e070891bc5d9963ce5ff280N.exe
- Size
  
  109KB
- MD5
  
  9baeed8c0e070891bc5d9963ce5ff280
- SHA1
  
  6966e969a11d1f9eee731ce408517f6e79a22e8f
- SHA256
  
  805f3d5f135fda75536a9e0db85712f3edf556a3e243443785ee8d265adaf0ba
- SHA512
  
  0df7d104c6c0f1fc960878e251dc632d8e215522a45e7d0d8fedfc315f8365c474e5747c0bb933262c5d270044c314e858df0c073c832f9835ce0aa8b480859e
- SSDEEP
  
  3072:1/me2Pm/qWshgESM0dPvO7MbDdvJ95LCqwzBu1DjHLMVDqqkSpR:1OeQhIfdPvO7Mb5vJ9Bwtu1DjrFqhz
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence