dbf992baf45decc38354f10ffbd636435e65ffef42dab4763c557380cb43c2df | Triage

Sharing

General

Target

7c3187a92d510028fb19c2c69470b1c0N.exe
Size

85KB
Sample

240819-nafnystgrj
MD5

7c3187a92d510028fb19c2c69470b1c0
SHA1

b3837f899a86d2c4a13308fad6676a393b078eba
SHA256

dbf992baf45decc38354f10ffbd636435e65ffef42dab4763c557380cb43c2df
SHA512

9aa3a13beac075c699ba95d895aab5f6b240d370f4c1e342ab78cd502f7cdbd914c6642382da6cc77c256fb9c48efb3ff19bbfd205aa4cc0f0f3dacd17bb0011
SSDEEP

1536:2VRll7ayM1poBFElcJgPfHGZ4D6B8ijkAhAJAmvF8NY2LHPMQ262AjCsQ2PCZZr/:2VRllKpIFEl0gPfHGZ4D6B8ijDk8NpHw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7c3187a92d510028fb19c2c69470b1c0N.exe
- Size
  
  85KB
- MD5
  
  7c3187a92d510028fb19c2c69470b1c0
- SHA1
  
  b3837f899a86d2c4a13308fad6676a393b078eba
- SHA256
  
  dbf992baf45decc38354f10ffbd636435e65ffef42dab4763c557380cb43c2df
- SHA512
  
  9aa3a13beac075c699ba95d895aab5f6b240d370f4c1e342ab78cd502f7cdbd914c6642382da6cc77c256fb9c48efb3ff19bbfd205aa4cc0f0f3dacd17bb0011
- SSDEEP
  
  1536:2VRll7ayM1poBFElcJgPfHGZ4D6B8ijkAhAJAmvF8NY2LHPMQ262AjCsQ2PCZZr/:2VRllKpIFEl0gPfHGZ4D6B8ijDk8NpHw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence