2016d86fc4a84f8553deb792eda3ba5da8990c555be59f7f221fa98ed023df3e | Triage

Sharing

General

Target

d3cef037c659d5136ea3781127c0fc60N.exe
Size

176KB
Sample

240821-3pj29a1bjn
MD5

d3cef037c659d5136ea3781127c0fc60
SHA1

1c2090317759c486b3d63af421a1d49a9057890a
SHA256

2016d86fc4a84f8553deb792eda3ba5da8990c555be59f7f221fa98ed023df3e
SHA512

264bb61d08a3998d298789de5ff44d6317afd256e113daa270a86a1339e46acfcd1de450b772e5f5cc8e6466b41b03388ba38bb2e9efb9d1ab95e687ac3dec28
SSDEEP

3072:ZrzyknMIuc8L67c98n+j6+JB8M6m9jqLsFmsdYXmLlcJVIZen+Vcv2JBwwRBkBnK:Zrzy4Puc8L67c98n+j6MB8MhjwszeXmr

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d3cef037c659d5136ea3781127c0fc60N.exe
- Size
  
  176KB
- MD5
  
  d3cef037c659d5136ea3781127c0fc60
- SHA1
  
  1c2090317759c486b3d63af421a1d49a9057890a
- SHA256
  
  2016d86fc4a84f8553deb792eda3ba5da8990c555be59f7f221fa98ed023df3e
- SHA512
  
  264bb61d08a3998d298789de5ff44d6317afd256e113daa270a86a1339e46acfcd1de450b772e5f5cc8e6466b41b03388ba38bb2e9efb9d1ab95e687ac3dec28
- SSDEEP
  
  3072:ZrzyknMIuc8L67c98n+j6+JB8M6m9jqLsFmsdYXmLlcJVIZen+Vcv2JBwwRBkBnK:Zrzy4Puc8L67c98n+j6MB8MhjwszeXmr
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence