8036c68acfc7a18c95fb418ee39a36626b5e7748fa60811743b9953d572d4764 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6d10bb6f43fbc4526e131739d4e6b5a0N.exe
Size

324KB
Sample

240821-vxqwrs1dpc
MD5

6d10bb6f43fbc4526e131739d4e6b5a0
SHA1

8cf1a539932d93be59b29d52d47dc0c3338eb14f
SHA256

8036c68acfc7a18c95fb418ee39a36626b5e7748fa60811743b9953d572d4764
SHA512

61ff7b76b89f7ec16f31dadf9c10bdc208fa69f1f6cced33b77d1bd339009518a6fed6a443f63b7fcffee6ade399bd488c154a82f67b0076613fc83b9269eb84
SSDEEP

3072:NOJY82KkOgx/Z7s/h/l1lvCrxdbMqlWGRdA6sQO56TQY2mEmjwCzAhjQjxNX+W5H:NeRODsJlvwbWGRdA6sQc/Y+mjwjOx5H

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6d10bb6f43fbc4526e131739d4e6b5a0N.exe
- Size
  
  324KB
- MD5
  
  6d10bb6f43fbc4526e131739d4e6b5a0
- SHA1
  
  8cf1a539932d93be59b29d52d47dc0c3338eb14f
- SHA256
  
  8036c68acfc7a18c95fb418ee39a36626b5e7748fa60811743b9953d572d4764
- SHA512
  
  61ff7b76b89f7ec16f31dadf9c10bdc208fa69f1f6cced33b77d1bd339009518a6fed6a443f63b7fcffee6ade399bd488c154a82f67b0076613fc83b9269eb84
- SSDEEP
  
  3072:NOJY82KkOgx/Z7s/h/l1lvCrxdbMqlWGRdA6sQO56TQY2mEmjwCzAhjQjxNX+W5H:NeRODsJlvwbWGRdA6sQc/Y+mjwjOx5H
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence