a6ef6e377d5098f5753c8cdac595d285d1ab1b0da7eaa1969ce7f8b0beb8d2d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bc6c115ef31bd51e56585f6135862cc0N.exe
Size

96KB
Sample

240822-lxw84szgqh
MD5

bc6c115ef31bd51e56585f6135862cc0
SHA1

45782cf83a2231a7c58a23d5ae6d377196813fac
SHA256

a6ef6e377d5098f5753c8cdac595d285d1ab1b0da7eaa1969ce7f8b0beb8d2d8
SHA512

d09fb0a2b2ed7a6e2a05e71cc2bc2898c7905f13665a337f619816492ddda04fc9df9e18c00e4fb8369b39c727cf65272a2d3f5e9e7e92c34ea507704a1403b4
SSDEEP

1536:KWzVz5IrQwEFEr5H5AeAPy/+EIUi9BUf7UmJRQ+eR5R45WtqV9R2R462izMg3R7o:bIrQwBNZeM+baf7vJe+eHrtG9MW3+3lo

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bc6c115ef31bd51e56585f6135862cc0N.exe
- Size
  
  96KB
- MD5
  
  bc6c115ef31bd51e56585f6135862cc0
- SHA1
  
  45782cf83a2231a7c58a23d5ae6d377196813fac
- SHA256
  
  a6ef6e377d5098f5753c8cdac595d285d1ab1b0da7eaa1969ce7f8b0beb8d2d8
- SHA512
  
  d09fb0a2b2ed7a6e2a05e71cc2bc2898c7905f13665a337f619816492ddda04fc9df9e18c00e4fb8369b39c727cf65272a2d3f5e9e7e92c34ea507704a1403b4
- SSDEEP
  
  1536:KWzVz5IrQwEFEr5H5AeAPy/+EIUi9BUf7UmJRQ+eR5R45WtqV9R2R462izMg3R7o:bIrQwBNZeM+baf7vJe+eHrtG9MW3+3lo
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence