c0b00a03cffae8a960c0a0e31f4d27ada5896ebab85b3c234932a0af7dcca9cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4562f26baf0be3a03c05b07ca709d70N.exe
Size

98KB
Sample

240818-3eygws1blf
MD5

c4562f26baf0be3a03c05b07ca709d70
SHA1

ef10e8e9fbbbef531f891030fe05cf94d65d85a1
SHA256

c0b00a03cffae8a960c0a0e31f4d27ada5896ebab85b3c234932a0af7dcca9cc
SHA512

0e0306e74ce29a471f4fcb01f9388131b0d80995071e204493fa01a61340ab5fa84ef376b8d70ff0d19b9ff1e61ac0cf00780dc6320134b43376f0270354ea88
SSDEEP

3072:ve/OrJTmmJ2/A8n1aViIEGeFKPD375lHzpa1P:W/OFTms2ArEGeYr75lHzpaF

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c4562f26baf0be3a03c05b07ca709d70N.exe
- Size
  
  98KB
- MD5
  
  c4562f26baf0be3a03c05b07ca709d70
- SHA1
  
  ef10e8e9fbbbef531f891030fe05cf94d65d85a1
- SHA256
  
  c0b00a03cffae8a960c0a0e31f4d27ada5896ebab85b3c234932a0af7dcca9cc
- SHA512
  
  0e0306e74ce29a471f4fcb01f9388131b0d80995071e204493fa01a61340ab5fa84ef376b8d70ff0d19b9ff1e61ac0cf00780dc6320134b43376f0270354ea88
- SSDEEP
  
  3072:ve/OrJTmmJ2/A8n1aViIEGeFKPD375lHzpa1P:W/OFTms2ArEGeYr75lHzpaF
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence