b1f8b264c0d40f64f3b86307a99be087fef839eb3a1394539fc642e46926bcdd | Triage

Sharing

General

Target

2bb0ba4ca4a3d475fbbe1196aaceca00N.exe
Size

1.2MB
Sample

240820-1kgp8aydmk
MD5

2bb0ba4ca4a3d475fbbe1196aaceca00
SHA1

145faf2e96b22b67a4eec4d97c7c0988e9a15d10
SHA256

b1f8b264c0d40f64f3b86307a99be087fef839eb3a1394539fc642e46926bcdd
SHA512

3d0d1cf2e850e1948f99587d29dddfa72e7dea1aea36219b82a5bb7a001b32e22513483528d34f36e8b0bb09e00e2775d8902476e8ecfe2f509c06666e013e64
SSDEEP

12288:hsv3DVqvQ6Ivxv26IveDVqvQ6IvpW1nvv6IveDVqvQ6IvYvc6IveDVqvQ6IvGm03:hw5hwq5hVW1nq5h3q5hL6X1q5h3q5h

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2bb0ba4ca4a3d475fbbe1196aaceca00N.exe
- Size
  
  1.2MB
- MD5
  
  2bb0ba4ca4a3d475fbbe1196aaceca00
- SHA1
  
  145faf2e96b22b67a4eec4d97c7c0988e9a15d10
- SHA256
  
  b1f8b264c0d40f64f3b86307a99be087fef839eb3a1394539fc642e46926bcdd
- SHA512
  
  3d0d1cf2e850e1948f99587d29dddfa72e7dea1aea36219b82a5bb7a001b32e22513483528d34f36e8b0bb09e00e2775d8902476e8ecfe2f509c06666e013e64
- SSDEEP
  
  12288:hsv3DVqvQ6Ivxv26IveDVqvQ6IvpW1nvv6IveDVqvQ6IvYvc6IveDVqvQ6IvGm03:hw5hwq5hVW1nq5h3q5hL6X1q5h3q5h
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence