2d361e41f140fefabeb6d73067fa8245d2e5f56985582eaa16e2d24f2836a97b | Triage

Sharing

General

Target

91495f2591765d4d300d141910edb6c0N.exe
Size

98KB
Sample

240822-k8ggcsyema
MD5

91495f2591765d4d300d141910edb6c0
SHA1

d6de411b5c56f708c21214ec5bb8c5db90be343c
SHA256

2d361e41f140fefabeb6d73067fa8245d2e5f56985582eaa16e2d24f2836a97b
SHA512

674a22b3336310ef24635438aad75693b8d9a7db05c06068f43f64e7b3a411f52ddf97f3d7557d3c9d81c022a57969cd7a7318d078d77a89548fb1c9649fced3
SSDEEP

3072:5VcpkCgIUjgGqY3hKQhEteFKPD375lHzpa1P:5VcpkCgIUXqxOEteYr75lHzpaF

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  91495f2591765d4d300d141910edb6c0N.exe
- Size
  
  98KB
- MD5
  
  91495f2591765d4d300d141910edb6c0
- SHA1
  
  d6de411b5c56f708c21214ec5bb8c5db90be343c
- SHA256
  
  2d361e41f140fefabeb6d73067fa8245d2e5f56985582eaa16e2d24f2836a97b
- SHA512
  
  674a22b3336310ef24635438aad75693b8d9a7db05c06068f43f64e7b3a411f52ddf97f3d7557d3c9d81c022a57969cd7a7318d078d77a89548fb1c9649fced3
- SSDEEP
  
  3072:5VcpkCgIUjgGqY3hKQhEteFKPD375lHzpa1P:5VcpkCgIUXqxOEteYr75lHzpaF
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence