48685015b9d9f5b1205f22c39cc20701195142417624f2608030e1797470a2d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

103fdf48c46b2fc20ed9e4037af73d90N.exe
Size

3.1MB
Sample

240819-sd6f1athrk
MD5

103fdf48c46b2fc20ed9e4037af73d90
SHA1

9d16d40919117ac303b5b7835bdf04d8ebdf88f4
SHA256

48685015b9d9f5b1205f22c39cc20701195142417624f2608030e1797470a2d7
SHA512

1be00c3b28e5ec8ab86266335621b291df6e14455fc1acb6c890faac0bcd9b4dd223f866fba1cafc2d7fd4dd42262e61b6f5370660294b0f32639b01cd4c734b
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBU9w4Su+LNfej:+R0pI/IQlUoMPdmpSpe4JkNfej

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  103fdf48c46b2fc20ed9e4037af73d90N.exe
- Size
  
  3.1MB
- MD5
  
  103fdf48c46b2fc20ed9e4037af73d90
- SHA1
  
  9d16d40919117ac303b5b7835bdf04d8ebdf88f4
- SHA256
  
  48685015b9d9f5b1205f22c39cc20701195142417624f2608030e1797470a2d7
- SHA512
  
  1be00c3b28e5ec8ab86266335621b291df6e14455fc1acb6c890faac0bcd9b4dd223f866fba1cafc2d7fd4dd42262e61b6f5370660294b0f32639b01cd4c734b
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBU9w4Su+LNfej:+R0pI/IQlUoMPdmpSpe4JkNfej
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence