f0cfa108ea45aad6b2a601a26a553072df02de1e7f7570473fd17b2a157717e3 | Triage

Sharing

General

Target

f0d2ac9b465985fa1a7fd12e1dd17310N.exe
Size

259KB
Sample

240818-gbhflsycmg
MD5

f0d2ac9b465985fa1a7fd12e1dd17310
SHA1

ceb304d83211a55c2fe7868d9c76aca277b4a640
SHA256

f0cfa108ea45aad6b2a601a26a553072df02de1e7f7570473fd17b2a157717e3
SHA512

02bcdbe594c30eb62f9b08a9a14176ff0d4ece3aa0341dbc8bb73f7a107cc0a9fd72f068bf02a7ec6a434dc30be8dd4d12be89416713b743fd6a806cf3a120a9
SSDEEP

3072:E/eROoPl2XXSawyqJ9IDlRxyhTbhgu+tAcrzkAqSxYIhOmTsF93UYfwC6GIoutzG:E/GPl6X6yqsDshsrYIcm4FmowdHoSa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f0d2ac9b465985fa1a7fd12e1dd17310N.exe
- Size
  
  259KB
- MD5
  
  f0d2ac9b465985fa1a7fd12e1dd17310
- SHA1
  
  ceb304d83211a55c2fe7868d9c76aca277b4a640
- SHA256
  
  f0cfa108ea45aad6b2a601a26a553072df02de1e7f7570473fd17b2a157717e3
- SHA512
  
  02bcdbe594c30eb62f9b08a9a14176ff0d4ece3aa0341dbc8bb73f7a107cc0a9fd72f068bf02a7ec6a434dc30be8dd4d12be89416713b743fd6a806cf3a120a9
- SSDEEP
  
  3072:E/eROoPl2XXSawyqJ9IDlRxyhTbhgu+tAcrzkAqSxYIhOmTsF93UYfwC6GIoutzG:E/GPl6X6yqsDshsrYIcm4FmowdHoSa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence