22aeeb9ce66d9285420dac102ee136a3d86ed80d3dbc43c63c0a696ed7db8b2c | Triage

Sharing

General

Target

4b0b856ec56ee9199e14ff85d1960b00N.exe
Size

59KB
Sample

240822-dgxkyayflk
MD5

4b0b856ec56ee9199e14ff85d1960b00
SHA1

543e4ecf8524eced44782140ba1b4489e9908de4
SHA256

22aeeb9ce66d9285420dac102ee136a3d86ed80d3dbc43c63c0a696ed7db8b2c
SHA512

169ff2164f534da465aca0b4fda0899aed5f8853c222347de65c58ba6d9a1cc4e86329a3e39ddb7d1b8135c6d68e3e6a0eaf135ff22d5b6a7ecb8afdd354fd67
SSDEEP

1536:cfh0BwRCvJUrvMEvhPvDy1HrIf2NCyVso:2hCQCP+nDy1HUteso

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  4b0b856ec56ee9199e14ff85d1960b00N.exe
- Size
  
  59KB
- MD5
  
  4b0b856ec56ee9199e14ff85d1960b00
- SHA1
  
  543e4ecf8524eced44782140ba1b4489e9908de4
- SHA256
  
  22aeeb9ce66d9285420dac102ee136a3d86ed80d3dbc43c63c0a696ed7db8b2c
- SHA512
  
  169ff2164f534da465aca0b4fda0899aed5f8853c222347de65c58ba6d9a1cc4e86329a3e39ddb7d1b8135c6d68e3e6a0eaf135ff22d5b6a7ecb8afdd354fd67
- SSDEEP
  
  1536:cfh0BwRCvJUrvMEvhPvDy1HrIf2NCyVso:2hCQCP+nDy1HUteso
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence