45998ffeaea0fde14dff8bfad317c474d2ec59cef2f3bd4ed2cad1e49cd59d4d | Triage

Sharing

General

Target

80908bf47f14c60f3670fe8987a4de50N.exe
Size

91KB
Sample

240822-l2k2ms1amd
MD5

80908bf47f14c60f3670fe8987a4de50
SHA1

7f35936661923e05eabf1e7a6a020f34559e4d47
SHA256

45998ffeaea0fde14dff8bfad317c474d2ec59cef2f3bd4ed2cad1e49cd59d4d
SHA512

d654b35d467ec4a7de2e599219a06ca4f1885261462a82ed9f7abb20dbf7e3ef5f99b01dab83a86b65a9d403d39ec97873d08224a242a528f185e316344b46e1
SSDEEP

1536:i8wgvo3CYWCKhlMr+lCETLMW6qVZiau84VXcYr/viVMi:Cd3CAaHCETc4Zitso/vOMi

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  80908bf47f14c60f3670fe8987a4de50N.exe
- Size
  
  91KB
- MD5
  
  80908bf47f14c60f3670fe8987a4de50
- SHA1
  
  7f35936661923e05eabf1e7a6a020f34559e4d47
- SHA256
  
  45998ffeaea0fde14dff8bfad317c474d2ec59cef2f3bd4ed2cad1e49cd59d4d
- SHA512
  
  d654b35d467ec4a7de2e599219a06ca4f1885261462a82ed9f7abb20dbf7e3ef5f99b01dab83a86b65a9d403d39ec97873d08224a242a528f185e316344b46e1
- SSDEEP
  
  1536:i8wgvo3CYWCKhlMr+lCETLMW6qVZiau84VXcYr/viVMi:Cd3CAaHCETc4Zitso/vOMi
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence