14380f4ba326fa0f487f618b6276a00198fa9e646ebad60b115b6ab6712c3463 | Triage

Sharing

General

Target

4fe29c6dc472f1b74a559f4325b58c70N.exe
Size

128KB
Sample

240818-s7j5vstflm
MD5

4fe29c6dc472f1b74a559f4325b58c70
SHA1

32a977f65c75231bbb908f4646cd7e7ce6fd5f76
SHA256

14380f4ba326fa0f487f618b6276a00198fa9e646ebad60b115b6ab6712c3463
SHA512

731e2387b99f70c32bf5786eef1e6a610db3272e1398e2d43c81848e18088ac23de78250bc834da947c5fd8cb0330e49eb3b213c07d294ae05e54a19e84636d3
SSDEEP

3072:o3RoTpExB81Dtw8asCHNhMXi6Y0HYSx9m9jqLsFmp:ohwpiat2xUS6UJjws6

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  4fe29c6dc472f1b74a559f4325b58c70N.exe
- Size
  
  128KB
- MD5
  
  4fe29c6dc472f1b74a559f4325b58c70
- SHA1
  
  32a977f65c75231bbb908f4646cd7e7ce6fd5f76
- SHA256
  
  14380f4ba326fa0f487f618b6276a00198fa9e646ebad60b115b6ab6712c3463
- SHA512
  
  731e2387b99f70c32bf5786eef1e6a610db3272e1398e2d43c81848e18088ac23de78250bc834da947c5fd8cb0330e49eb3b213c07d294ae05e54a19e84636d3
- SSDEEP
  
  3072:o3RoTpExB81Dtw8asCHNhMXi6Y0HYSx9m9jqLsFmp:ohwpiat2xUS6UJjws6
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence