4a4bb8804495ff9addedc41c7c691051c95399f4190bab9f65574ace4ceedd61 | Triage

Sharing

General

Target

d18130044b73337d01d92193cd4cf650N.exe
Size

352KB
Sample

240820-k42lqsxfkl
MD5

d18130044b73337d01d92193cd4cf650
SHA1

1ef59d40f0c11975fa05bb0643066e574a6c7aac
SHA256

4a4bb8804495ff9addedc41c7c691051c95399f4190bab9f65574ace4ceedd61
SHA512

200311bd5900ae285bbc37c56b0fe2bc13125d5082a158a3dcbab33ebb8e9a0f8c494f713d778430391beb9ab6e38796bb2ae4dbd9e64680c8dd4ede545ee9c8
SSDEEP

3072:GMBGyW0rciP09OJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:5B0G4yjwHL/T7Gsyn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d18130044b73337d01d92193cd4cf650N.exe
- Size
  
  352KB
- MD5
  
  d18130044b73337d01d92193cd4cf650
- SHA1
  
  1ef59d40f0c11975fa05bb0643066e574a6c7aac
- SHA256
  
  4a4bb8804495ff9addedc41c7c691051c95399f4190bab9f65574ace4ceedd61
- SHA512
  
  200311bd5900ae285bbc37c56b0fe2bc13125d5082a158a3dcbab33ebb8e9a0f8c494f713d778430391beb9ab6e38796bb2ae4dbd9e64680c8dd4ede545ee9c8
- SSDEEP
  
  3072:GMBGyW0rciP09OJF4EISi/i4gG4nv4H3EzkGSaXiT+9S+a1+s3wNxn:5B0G4yjwHL/T7Gsyn
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence