6ff82db0e6f9293e3480b8bafaea62655167d42ec4c98a35b21bacbaa2b96277 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33e923fba1620d05dfa179ccd3513710N.exe
Size

896KB
Sample

240818-lhq4jszfpk
MD5

33e923fba1620d05dfa179ccd3513710
SHA1

27c2fc7f82f8cadb93839e031a452c6f19821d24
SHA256

6ff82db0e6f9293e3480b8bafaea62655167d42ec4c98a35b21bacbaa2b96277
SHA512

4bac7bd0bb5e6fcd746485a384cf59f48867ce5bc231fe5aa0506494c9d6e4d5ded1c765b42708dd5fa0e4ebc4ca52206006163aa9ba2ad10a95bf1e37150a19
SSDEEP

24576:duTRTGryZ5d9TRTGryaITRTGryZ5d9TRTGryeLTRTGryZ5d9TRTGryaITRTGryZB:du9bD99wI9bD99e9bD99wI9bD99

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  33e923fba1620d05dfa179ccd3513710N.exe
- Size
  
  896KB
- MD5
  
  33e923fba1620d05dfa179ccd3513710
- SHA1
  
  27c2fc7f82f8cadb93839e031a452c6f19821d24
- SHA256
  
  6ff82db0e6f9293e3480b8bafaea62655167d42ec4c98a35b21bacbaa2b96277
- SHA512
  
  4bac7bd0bb5e6fcd746485a384cf59f48867ce5bc231fe5aa0506494c9d6e4d5ded1c765b42708dd5fa0e4ebc4ca52206006163aa9ba2ad10a95bf1e37150a19
- SSDEEP
  
  24576:duTRTGryZ5d9TRTGryaITRTGryZ5d9TRTGryeLTRTGryZ5d9TRTGryaITRTGryZB:du9bD99wI9bD99e9bD99wI9bD99
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence