c9e89d663ba2406dac9df8743ad9c392b177bb57d4248f53e630614592b2b222 | Triage

Sharing

General

Target

cea1653e2ebe1b03db70767431083030N.exe
Size

90KB
Sample

240822-gaw8da1cnh
MD5

cea1653e2ebe1b03db70767431083030
SHA1

fe89462a9aac4ac244821537fa7a3a9b6171a8e8
SHA256

c9e89d663ba2406dac9df8743ad9c392b177bb57d4248f53e630614592b2b222
SHA512

530689bd4a8d5948bb9bb7e774b9d834ffa519dd39e7fb545f49d215612394d78a026ca2e66cefb0596b38c5a0f0a0017e92a628e575bc0684707da7af96150f
SSDEEP

1536:AliYBHESQxmETSjs2SdnEKXizCCX3F/rgf5hX2WmbBk2yZfroRfldDX7fOOQ/4B0:MFHESOmWSjwdEKCC63FMf5sWSBkFZfrH

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  cea1653e2ebe1b03db70767431083030N.exe
- Size
  
  90KB
- MD5
  
  cea1653e2ebe1b03db70767431083030
- SHA1
  
  fe89462a9aac4ac244821537fa7a3a9b6171a8e8
- SHA256
  
  c9e89d663ba2406dac9df8743ad9c392b177bb57d4248f53e630614592b2b222
- SHA512
  
  530689bd4a8d5948bb9bb7e774b9d834ffa519dd39e7fb545f49d215612394d78a026ca2e66cefb0596b38c5a0f0a0017e92a628e575bc0684707da7af96150f
- SSDEEP
  
  1536:AliYBHESQxmETSjs2SdnEKXizCCX3F/rgf5hX2WmbBk2yZfroRfldDX7fOOQ/4B0:MFHESOmWSjwdEKCC63FMf5sWSBkFZfrH
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence