751a8e2330478e8877f2ffb7e971e8488c00ac03ae2427adb12619f67c64d9d9 | Triage

Sharing

General

Target

deed0452a77b233bf8b1b9f19ecf8bd0N.exe
Size

288KB
Sample

240821-hgga6svamd
MD5

deed0452a77b233bf8b1b9f19ecf8bd0
SHA1

a71fcdb7f9ccb7b6378dba4cd9f66b0d038b0045
SHA256

751a8e2330478e8877f2ffb7e971e8488c00ac03ae2427adb12619f67c64d9d9
SHA512

9e4fcda172964eb30ec2217797d95d8b83eb880760a33669381dcef391d2339508c3c4684de58b071101b4027374791dbd2e9daed34bfa51f8482cd5955b72e3
SSDEEP

3072:eVzURZGwqg+dUrekoRVT8S3a+LaYthj7ZTNf9Nm2C4smf9vms+CzFW4r2RKihOfB:CgRtUR6N+uwLN7Rjr

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  deed0452a77b233bf8b1b9f19ecf8bd0N.exe
- Size
  
  288KB
- MD5
  
  deed0452a77b233bf8b1b9f19ecf8bd0
- SHA1
  
  a71fcdb7f9ccb7b6378dba4cd9f66b0d038b0045
- SHA256
  
  751a8e2330478e8877f2ffb7e971e8488c00ac03ae2427adb12619f67c64d9d9
- SHA512
  
  9e4fcda172964eb30ec2217797d95d8b83eb880760a33669381dcef391d2339508c3c4684de58b071101b4027374791dbd2e9daed34bfa51f8482cd5955b72e3
- SSDEEP
  
  3072:eVzURZGwqg+dUrekoRVT8S3a+LaYthj7ZTNf9Nm2C4smf9vms+CzFW4r2RKihOfB:CgRtUR6N+uwLN7Rjr
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence