8a2ed6d87a7a58884b8c72c8c3d7ab7ac1fc3875fbab22cdaedf68b3ff05318a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6be585e7dcf1abc196f546504afcdd0N.exe
Size

64KB
Sample

240818-nq2alasbjd
MD5

a6be585e7dcf1abc196f546504afcdd0
SHA1

505c9aa8f23ffcdde70191d187d0a06db6f7b290
SHA256

8a2ed6d87a7a58884b8c72c8c3d7ab7ac1fc3875fbab22cdaedf68b3ff05318a
SHA512

5a76678dde53ef55f10fb1336a70b116037070d61ae903d0ac6c1ce6aec838754a08ef210e4a9365dcfc6d59a29e36a684ca82cabd9ed11ef9a7c00cc623a470
SSDEEP

1536:GIdRF3KufSC5CVYWz/aHOLN8o79FmcOse0bZuYDPf:GWMcSBVv0jcOseSZuY7f

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6be585e7dcf1abc196f546504afcdd0N.exe
- Size
  
  64KB
- MD5
  
  a6be585e7dcf1abc196f546504afcdd0
- SHA1
  
  505c9aa8f23ffcdde70191d187d0a06db6f7b290
- SHA256
  
  8a2ed6d87a7a58884b8c72c8c3d7ab7ac1fc3875fbab22cdaedf68b3ff05318a
- SHA512
  
  5a76678dde53ef55f10fb1336a70b116037070d61ae903d0ac6c1ce6aec838754a08ef210e4a9365dcfc6d59a29e36a684ca82cabd9ed11ef9a7c00cc623a470
- SSDEEP
  
  1536:GIdRF3KufSC5CVYWz/aHOLN8o79FmcOse0bZuYDPf:GWMcSBVv0jcOseSZuY7f
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence