11f8837ecd0a5135c566ba778e7b055160c59017b3ab7d13f166abfc0c5ec162 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0a5f7f4d0cec08b5cab4c57f69f8790N.exe
Size

92KB
Sample

240822-evknzaxhqa
MD5

d0a5f7f4d0cec08b5cab4c57f69f8790
SHA1

031b1d654b99cb3fccdbcffcdb1715c25eaaa6de
SHA256

11f8837ecd0a5135c566ba778e7b055160c59017b3ab7d13f166abfc0c5ec162
SHA512

595ba88d75cdf35642af2d8cf0566a3ae53c23b352b978b5c9a9f940d15f41fa2a7e31ebe0d9ddee502c40869109878f54517e76a03cf1562eaae4b15e63e6ff
SSDEEP

1536:SxpQwS6DVec0r9slnx1FzGb6L2pJ7rR52Ll0ctNnmjXq+66DFUABABOVLefE3:ODvlYbCTnmj6+JB8M3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d0a5f7f4d0cec08b5cab4c57f69f8790N.exe
- Size
  
  92KB
- MD5
  
  d0a5f7f4d0cec08b5cab4c57f69f8790
- SHA1
  
  031b1d654b99cb3fccdbcffcdb1715c25eaaa6de
- SHA256
  
  11f8837ecd0a5135c566ba778e7b055160c59017b3ab7d13f166abfc0c5ec162
- SHA512
  
  595ba88d75cdf35642af2d8cf0566a3ae53c23b352b978b5c9a9f940d15f41fa2a7e31ebe0d9ddee502c40869109878f54517e76a03cf1562eaae4b15e63e6ff
- SSDEEP
  
  1536:SxpQwS6DVec0r9slnx1FzGb6L2pJ7rR52Ll0ctNnmjXq+66DFUABABOVLefE3:ODvlYbCTnmj6+JB8M3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence