edbc7c9227fc284076d49ab900bc495cb29c163e2b8a19d75fd9566dc958e0d3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7ac5d39f814f697a5fc04ecda0a3240N.exe
Size

96KB
Sample

240822-l6c7latfqp
MD5

b7ac5d39f814f697a5fc04ecda0a3240
SHA1

f1f16e2dac33c99ec008c5a7b0023d7e1dc0c43b
SHA256

edbc7c9227fc284076d49ab900bc495cb29c163e2b8a19d75fd9566dc958e0d3
SHA512

a485273026daa9c1681573da0250ec062eb298d3d889ff0348f93f03b7885662051c6c7779c2415853d40d98d37ed5541b1902d81138f3657de342eaa7e05625
SSDEEP

1536:yH6GQKUR8vXJSq5VtNyfy8F68J/WfbwetFgT4DVcdZ2JVQBKoC/CKniTCvVAva61:yiKUR4Xh5VtNyfyo68JCbweX44DVqZ2g

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b7ac5d39f814f697a5fc04ecda0a3240N.exe
- Size
  
  96KB
- MD5
  
  b7ac5d39f814f697a5fc04ecda0a3240
- SHA1
  
  f1f16e2dac33c99ec008c5a7b0023d7e1dc0c43b
- SHA256
  
  edbc7c9227fc284076d49ab900bc495cb29c163e2b8a19d75fd9566dc958e0d3
- SHA512
  
  a485273026daa9c1681573da0250ec062eb298d3d889ff0348f93f03b7885662051c6c7779c2415853d40d98d37ed5541b1902d81138f3657de342eaa7e05625
- SSDEEP
  
  1536:yH6GQKUR8vXJSq5VtNyfy8F68J/WfbwetFgT4DVcdZ2JVQBKoC/CKniTCvVAva61:yiKUR4Xh5VtNyfyo68JCbweX44DVqZ2g
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence