8bea54c4222bab74197f9e137cda3aaeb8be91fb99a1675dd389e74942c132f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8e4d80c940e7578747150551d940420N.exe
Size

169KB
Sample

240822-flj7hszbnd
MD5

a8e4d80c940e7578747150551d940420
SHA1

cbd3f3d0ada79118d5736f79d95d5374cd4700e0
SHA256

8bea54c4222bab74197f9e137cda3aaeb8be91fb99a1675dd389e74942c132f6
SHA512

a1df4bd5553ad42bb032e1fe0ca0f3e5fd411d0a5cc624d9b54becabfd5df2f34e416e424a26f5786bb92afddcd3d8629ec85594b5d0135af7993ef2339e0507
SSDEEP

3072:E7e/cVwxktSgTASRZnTkODRVgPxMeEvPOdgujv6NLPfFFrKP92f65Ha:EmdggJML3OdgawrFZKPf9

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a8e4d80c940e7578747150551d940420N.exe
- Size
  
  169KB
- MD5
  
  a8e4d80c940e7578747150551d940420
- SHA1
  
  cbd3f3d0ada79118d5736f79d95d5374cd4700e0
- SHA256
  
  8bea54c4222bab74197f9e137cda3aaeb8be91fb99a1675dd389e74942c132f6
- SHA512
  
  a1df4bd5553ad42bb032e1fe0ca0f3e5fd411d0a5cc624d9b54becabfd5df2f34e416e424a26f5786bb92afddcd3d8629ec85594b5d0135af7993ef2339e0507
- SSDEEP
  
  3072:E7e/cVwxktSgTASRZnTkODRVgPxMeEvPOdgujv6NLPfFFrKP92f65Ha:EmdggJML3OdgawrFZKPf9
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence