8299c4c497a7415a7957c20eb27211df4597cdc56cff0f93d288617dad15606e | Triage

Sharing

General

Target

b0cd730e9a81534cae3b37bd02ed6d50N.exe
Size

296KB
Sample

240821-wzgljstckh
MD5

b0cd730e9a81534cae3b37bd02ed6d50
SHA1

99ce8d1ef5ce3e3406d61ae71237c4a5718a256b
SHA256

8299c4c497a7415a7957c20eb27211df4597cdc56cff0f93d288617dad15606e
SHA512

8100639cddedde89517eb156afc92f46f249a9733cd5d37eb336747194fd6eaf797ebb8720f0982bbd1a35c11a6e9db9ad837cfac2951d6927323dcd02e10475
SSDEEP

1536:Kqe4aJQXwbJKcdtU8LoZEYLTI2YYx59r8DUntOwirBNcUnNTVZNNit3B0xit3g5p:jWQAbJuLTIARA1+6NhZ6P0c9fpxg6pg

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b0cd730e9a81534cae3b37bd02ed6d50N.exe
- Size
  
  296KB
- MD5
  
  b0cd730e9a81534cae3b37bd02ed6d50
- SHA1
  
  99ce8d1ef5ce3e3406d61ae71237c4a5718a256b
- SHA256
  
  8299c4c497a7415a7957c20eb27211df4597cdc56cff0f93d288617dad15606e
- SHA512
  
  8100639cddedde89517eb156afc92f46f249a9733cd5d37eb336747194fd6eaf797ebb8720f0982bbd1a35c11a6e9db9ad837cfac2951d6927323dcd02e10475
- SSDEEP
  
  1536:Kqe4aJQXwbJKcdtU8LoZEYLTI2YYx59r8DUntOwirBNcUnNTVZNNit3B0xit3g5p:jWQAbJuLTIARA1+6NhZ6P0c9fpxg6pg
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence