2e43c0fcc6c3b6ca8f1b80cfbeb47ee814a35a54fefb0249145e64112b19a09b | Triage

Sharing

General

Target

d699a2189671acafeba1b982369dab80N.exe
Size

120KB
Sample

240819-rmpzyayerc
MD5

d699a2189671acafeba1b982369dab80
SHA1

e4ce9b0075148287958a0fd41ee071cdab298103
SHA256

2e43c0fcc6c3b6ca8f1b80cfbeb47ee814a35a54fefb0249145e64112b19a09b
SHA512

a9e9d1b71a0956a871bdc0b2566b7a23f7e196f5360a848708b41cefbc5cf82770c5b65fbff71531b628898ab117ce3235712913c920c7917b31c8a8ce357747
SSDEEP

1536:bcCWp99NqoFoPEZiWl/M7VO9nwF0OOi4DH0fOhjz0cZ44mjD9r823F4:Cdo74iI07gVwFBF4DkOGi/mjRrz3C

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d699a2189671acafeba1b982369dab80N.exe
- Size
  
  120KB
- MD5
  
  d699a2189671acafeba1b982369dab80
- SHA1
  
  e4ce9b0075148287958a0fd41ee071cdab298103
- SHA256
  
  2e43c0fcc6c3b6ca8f1b80cfbeb47ee814a35a54fefb0249145e64112b19a09b
- SHA512
  
  a9e9d1b71a0956a871bdc0b2566b7a23f7e196f5360a848708b41cefbc5cf82770c5b65fbff71531b628898ab117ce3235712913c920c7917b31c8a8ce357747
- SSDEEP
  
  1536:bcCWp99NqoFoPEZiWl/M7VO9nwF0OOi4DH0fOhjz0cZ44mjD9r823F4:Cdo74iI07gVwFBF4DkOGi/mjRrz3C
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence