015a1434401b62c2a6d78ca4d8631f96b3393f14e4fcf6eb6c8992bf84f09d8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3402dde4d00b4f56125df31e933e8030N.exe
Size

416KB
Sample

240819-ckherasanp
MD5

3402dde4d00b4f56125df31e933e8030
SHA1

793b6437aceb0cf1a45e7da6298c5f2802226bca
SHA256

015a1434401b62c2a6d78ca4d8631f96b3393f14e4fcf6eb6c8992bf84f09d8a
SHA512

8afcc3a9d467ca6ba8a53385b4e3c99dfc892d9ed90ccddb6a6bf81208a43e960836960e5f0c6588d8a6a7b7f1ae5b99a2dfa22847bff49ee79825c5c1a0ab15
SSDEEP

12288:edpAdmHF2xNdRPh2kkkkK4kXkkkkkkkkl888888888888888888nI:e3Aq2xNdRPh2kkkkK4kXkkkkkkkkO

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3402dde4d00b4f56125df31e933e8030N.exe
- Size
  
  416KB
- MD5
  
  3402dde4d00b4f56125df31e933e8030
- SHA1
  
  793b6437aceb0cf1a45e7da6298c5f2802226bca
- SHA256
  
  015a1434401b62c2a6d78ca4d8631f96b3393f14e4fcf6eb6c8992bf84f09d8a
- SHA512
  
  8afcc3a9d467ca6ba8a53385b4e3c99dfc892d9ed90ccddb6a6bf81208a43e960836960e5f0c6588d8a6a7b7f1ae5b99a2dfa22847bff49ee79825c5c1a0ab15
- SSDEEP
  
  12288:edpAdmHF2xNdRPh2kkkkK4kXkkkkkkkkl888888888888888888nI:e3Aq2xNdRPh2kkkkK4kXkkkkkkkkO
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence