d998b307180bca6d8c3d77092945fe3c31360aeff0b1d58f2afb7f27b8812776 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c6959f6da5006ce8b79bf112cae8550N.exe
Size

94KB
Sample

240822-l1hvwszhrd
MD5

8c6959f6da5006ce8b79bf112cae8550
SHA1

4369314e8edb9869c2a7e9b403ab2fa8641e4121
SHA256

d998b307180bca6d8c3d77092945fe3c31360aeff0b1d58f2afb7f27b8812776
SHA512

985764eb6a56d12d83a6affe765d8a847d58298186884bd8dda56b9524630aeb99bb3757085683f21524f6937086d6faa8184bbf1c1a0220e9a3a520722be500
SSDEEP

1536:CTxy92vhAaUahDwow4O2LFaIZTJ+7LhkiB0MPiKeEAgv:392ZAalTFaMU7uihJ5v

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8c6959f6da5006ce8b79bf112cae8550N.exe
- Size
  
  94KB
- MD5
  
  8c6959f6da5006ce8b79bf112cae8550
- SHA1
  
  4369314e8edb9869c2a7e9b403ab2fa8641e4121
- SHA256
  
  d998b307180bca6d8c3d77092945fe3c31360aeff0b1d58f2afb7f27b8812776
- SHA512
  
  985764eb6a56d12d83a6affe765d8a847d58298186884bd8dda56b9524630aeb99bb3757085683f21524f6937086d6faa8184bbf1c1a0220e9a3a520722be500
- SSDEEP
  
  1536:CTxy92vhAaUahDwow4O2LFaIZTJ+7LhkiB0MPiKeEAgv:392ZAalTFaMU7uihJ5v
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence