528c1d4d8f73f445ce79160b3d810ec3c24840c76710d1a777909d7b0c994176 | Triage

Sharing

General

Target

e1ed23975e421f36eca8a173cfcfc570N.exe
Size

148KB
Sample

240818-l56gra1frp
MD5

e1ed23975e421f36eca8a173cfcfc570
SHA1

a36caf073457799a0c6e92f98916939bcc3b2a55
SHA256

528c1d4d8f73f445ce79160b3d810ec3c24840c76710d1a777909d7b0c994176
SHA512

123c753041feee7702ecdfe6c02f58967ed64b2cb9c3fddd230ce33d12565c1fcd78f1c31a207fd7f78fbf3ac04d0f4451dd67666b3fe1ab268f41c2f92869d9
SSDEEP

3072:UK9d7pPWoQK7hmY5OdzOdjKtlDoNQQ9wlHOdj+UCRQKOdj+U:UK9d7RVQKlmKOdzOdkOdezOd

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e1ed23975e421f36eca8a173cfcfc570N.exe
- Size
  
  148KB
- MD5
  
  e1ed23975e421f36eca8a173cfcfc570
- SHA1
  
  a36caf073457799a0c6e92f98916939bcc3b2a55
- SHA256
  
  528c1d4d8f73f445ce79160b3d810ec3c24840c76710d1a777909d7b0c994176
- SHA512
  
  123c753041feee7702ecdfe6c02f58967ed64b2cb9c3fddd230ce33d12565c1fcd78f1c31a207fd7f78fbf3ac04d0f4451dd67666b3fe1ab268f41c2f92869d9
- SSDEEP
  
  3072:UK9d7pPWoQK7hmY5OdzOdjKtlDoNQQ9wlHOdj+UCRQKOdj+U:UK9d7RVQKlmKOdzOdkOdezOd
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence