9683e7de34a62e8f35f4834db4102ea64baf5ef5e9678d5ce2c057bbb61feb1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b917261283fca8ac0d0ecdd1f6b58d80N.exe
Size

208KB
Sample

240822-nbne7atenh
MD5

b917261283fca8ac0d0ecdd1f6b58d80
SHA1

4d70a9eb984f6a1d4a1e43235d93eccb86e48898
SHA256

9683e7de34a62e8f35f4834db4102ea64baf5ef5e9678d5ce2c057bbb61feb1c
SHA512

4645a6735b7345724e6ad7b08a6fd19bbc23e04d368558a8c60c20802095a149d48f13381e9e0a9f29732b7c270904159291e65aa55d8b4509a6a2574735b257
SSDEEP

3072:zA7wkp6BzMIHkV1kN6BngC6+oXO56hKpi9poF5aY6+oocpGHHQnNJuIb:z66BzMIHkTkN6Or+Eu6QnFw5+0pU8b

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b917261283fca8ac0d0ecdd1f6b58d80N.exe
- Size
  
  208KB
- MD5
  
  b917261283fca8ac0d0ecdd1f6b58d80
- SHA1
  
  4d70a9eb984f6a1d4a1e43235d93eccb86e48898
- SHA256
  
  9683e7de34a62e8f35f4834db4102ea64baf5ef5e9678d5ce2c057bbb61feb1c
- SHA512
  
  4645a6735b7345724e6ad7b08a6fd19bbc23e04d368558a8c60c20802095a149d48f13381e9e0a9f29732b7c270904159291e65aa55d8b4509a6a2574735b257
- SSDEEP
  
  3072:zA7wkp6BzMIHkV1kN6BngC6+oXO56hKpi9poF5aY6+oocpGHHQnNJuIb:z66BzMIHkTkN6Or+Eu6QnFw5+0pU8b
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence