58199b97a219805772aa3a0a07e8aafd155cbb26d1f9e11e5b8d183e8dba8408 | Triage

Sharing

General

Target

e7b4568afc1e51a3a16722982fd69a60N.exe
Size

768KB
Sample

240821-ftfjasvekm
MD5

e7b4568afc1e51a3a16722982fd69a60
SHA1

c3228b421da780d8937485b8732bc68d22780541
SHA256

58199b97a219805772aa3a0a07e8aafd155cbb26d1f9e11e5b8d183e8dba8408
SHA512

15d78d8552e5eb3e64c84c51765cb3464309e204bae59d12d3e73e4c4b2bed4c12db14736871c5ba30daae2ce651bb79b5c270a4044b7e131b1e4b283ce985d7
SSDEEP

12288:IJplfybWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQRPbWGRdA6sQlPh2kkkkK4Z:WlfyvzecrHPh2kkkkK4kXkkkkkkkkI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e7b4568afc1e51a3a16722982fd69a60N.exe
- Size
  
  768KB
- MD5
  
  e7b4568afc1e51a3a16722982fd69a60
- SHA1
  
  c3228b421da780d8937485b8732bc68d22780541
- SHA256
  
  58199b97a219805772aa3a0a07e8aafd155cbb26d1f9e11e5b8d183e8dba8408
- SHA512
  
  15d78d8552e5eb3e64c84c51765cb3464309e204bae59d12d3e73e4c4b2bed4c12db14736871c5ba30daae2ce651bb79b5c270a4044b7e131b1e4b283ce985d7
- SSDEEP
  
  12288:IJplfybWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQRPbWGRdA6sQlPh2kkkkK4Z:WlfyvzecrHPh2kkkkK4kXkkkkkkkkI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence