f6280b0cd98602cf625f770766fbe9179b5caeb18417bc76dd888e6242c51eb1 | Triage

Sharing

General

Target

dd27fd97908788551180494cf455d590N.exe
Size

111KB
Sample

240820-cvxx7ashqr
MD5

dd27fd97908788551180494cf455d590
SHA1

ec7ef42f3e6049dd9af7c4eeb9c151f87d605c76
SHA256

f6280b0cd98602cf625f770766fbe9179b5caeb18417bc76dd888e6242c51eb1
SHA512

5596953675fa985ccb360b7b47e6f24c2cd10f3152e762e8691eb2c8af599f85c49acfaf9440eb2886c0f785b0053406a6897896259f272903994f92345e0229
SSDEEP

3072:doKSxlT46ry5dNeIw0v0wnJcefSXQHPTTAkvB5Ddj:dzils0oQ2tnJfKXqPTX7DB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  dd27fd97908788551180494cf455d590N.exe
- Size
  
  111KB
- MD5
  
  dd27fd97908788551180494cf455d590
- SHA1
  
  ec7ef42f3e6049dd9af7c4eeb9c151f87d605c76
- SHA256
  
  f6280b0cd98602cf625f770766fbe9179b5caeb18417bc76dd888e6242c51eb1
- SHA512
  
  5596953675fa985ccb360b7b47e6f24c2cd10f3152e762e8691eb2c8af599f85c49acfaf9440eb2886c0f785b0053406a6897896259f272903994f92345e0229
- SSDEEP
  
  3072:doKSxlT46ry5dNeIw0v0wnJcefSXQHPTTAkvB5Ddj:dzils0oQ2tnJfKXqPTX7DB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence