f5077bc50b29c2eee12334309d63da66e8f3f3a30a8deec51c97225cf8e18ba6 | Triage

Sharing

General

Target

eca9960773a26a611b0435dce9b05b70N.exe
Size

224KB
Sample

240820-waz2laveqh
MD5

eca9960773a26a611b0435dce9b05b70
SHA1

00befc3ca2f162ce7f03087086c3de930ee01015
SHA256

f5077bc50b29c2eee12334309d63da66e8f3f3a30a8deec51c97225cf8e18ba6
SHA512

e3a4f74e77827e034f0eca99acc98cf765b584f53a2c998ff028bb4a2402cecb7d2f406e4b6ee25dd9dd03815f011d68fcd54848ec588f550f0ee799646109fe
SSDEEP

3072:jNobDBnNs6qbE9Wr+Li32W72B1xdLm102VZjuajDMyap9jCyFsWteYCWS3:jNoLqbEo72B1xBm102VQlter

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  eca9960773a26a611b0435dce9b05b70N.exe
- Size
  
  224KB
- MD5
  
  eca9960773a26a611b0435dce9b05b70
- SHA1
  
  00befc3ca2f162ce7f03087086c3de930ee01015
- SHA256
  
  f5077bc50b29c2eee12334309d63da66e8f3f3a30a8deec51c97225cf8e18ba6
- SHA512
  
  e3a4f74e77827e034f0eca99acc98cf765b584f53a2c998ff028bb4a2402cecb7d2f406e4b6ee25dd9dd03815f011d68fcd54848ec588f550f0ee799646109fe
- SSDEEP
  
  3072:jNobDBnNs6qbE9Wr+Li32W72B1xdLm102VZjuajDMyap9jCyFsWteYCWS3:jNoLqbEo72B1xBm102VQlter
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence