079a3e1f4c86eccd30c7366fb6815a9fca79bd655f1534ff42d4ff8af90e94dc | Triage

Sharing

General

Target

98ed989a3ca9fcbc39ffd4ba17620ec0N.exe
Size

208KB
Sample

240817-w8yleszgle
MD5

98ed989a3ca9fcbc39ffd4ba17620ec0
SHA1

e31c1ba55b862274556beee3ec7323e3164ce43d
SHA256

079a3e1f4c86eccd30c7366fb6815a9fca79bd655f1534ff42d4ff8af90e94dc
SHA512

d0deef1f5616d348197884f5020b86764d895ac4160331d8aad2825be56cdc2694882cf95053d6bfeeca1b773ee29f2ac00dbc00354f2cb9b5a04eabc1c89130
SSDEEP

3072:vgZSUV2ekg4x6HOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AuJk:vjc2ekgo6ulrtMsQB+vn87L5Az

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  98ed989a3ca9fcbc39ffd4ba17620ec0N.exe
- Size
  
  208KB
- MD5
  
  98ed989a3ca9fcbc39ffd4ba17620ec0
- SHA1
  
  e31c1ba55b862274556beee3ec7323e3164ce43d
- SHA256
  
  079a3e1f4c86eccd30c7366fb6815a9fca79bd655f1534ff42d4ff8af90e94dc
- SHA512
  
  d0deef1f5616d348197884f5020b86764d895ac4160331d8aad2825be56cdc2694882cf95053d6bfeeca1b773ee29f2ac00dbc00354f2cb9b5a04eabc1c89130
- SSDEEP
  
  3072:vgZSUV2ekg4x6HOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AuJk:vjc2ekgo6ulrtMsQB+vn87L5Az
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence