7b8a90a507158c3ce2204597bf75de41f62d9a85040a7801c23c4f8174d1aa58 | Triage

Sharing

General

Target

6f18a49fefcc0031efc428fa9f5c1ae0N.exe
Size

422KB
Sample

240821-r7hflavara
MD5

6f18a49fefcc0031efc428fa9f5c1ae0
SHA1

f19cc1eda0d3f81fae1804f7e85cb7e2c50fd0cc
SHA256

7b8a90a507158c3ce2204597bf75de41f62d9a85040a7801c23c4f8174d1aa58
SHA512

d85f949db4f4a8b429714e83d2dde62942ec50e839c5218e64005c296fd92d604e319f1f13622a1c965bac8256b3766c0d7d69644550391bba9cc0e5f3a96d0d
SSDEEP

6144:dNJqnCUV+2babO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:dHqC4GaXgA4XfczXgA4XA

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6f18a49fefcc0031efc428fa9f5c1ae0N.exe
- Size
  
  422KB
- MD5
  
  6f18a49fefcc0031efc428fa9f5c1ae0
- SHA1
  
  f19cc1eda0d3f81fae1804f7e85cb7e2c50fd0cc
- SHA256
  
  7b8a90a507158c3ce2204597bf75de41f62d9a85040a7801c23c4f8174d1aa58
- SHA512
  
  d85f949db4f4a8b429714e83d2dde62942ec50e839c5218e64005c296fd92d604e319f1f13622a1c965bac8256b3766c0d7d69644550391bba9cc0e5f3a96d0d
- SSDEEP
  
  6144:dNJqnCUV+2babO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:dHqC4GaXgA4XfczXgA4XA
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence