9bf5d93076c610a5a92322c1fba771b3b41f71c57946ff4ebe2f911eca94776e | Triage

Sharing

General

Target

c007ac81d2e09fb779f004791f2b8660N.exe
Size

464KB
Sample

240822-nft4jaxapm
MD5

c007ac81d2e09fb779f004791f2b8660
SHA1

e1af6795a989e479115381dc19c8cd53374d559f
SHA256

9bf5d93076c610a5a92322c1fba771b3b41f71c57946ff4ebe2f911eca94776e
SHA512

ec36c9ac7696b637c834b0773502ab2e5faf6c157b231728ac8583f9370cca4b6c32baba1616a3f255c796c309a61fea23d7079dad83c6a9f3a273170bcb8c79
SSDEEP

12288:JF/hy2TOlQftPh2kkkkK4kXkkkkkkkkl888888888888888888nI:JF5y2TOQlPh2kkkkK4kXkkkkkkkki

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c007ac81d2e09fb779f004791f2b8660N.exe
- Size
  
  464KB
- MD5
  
  c007ac81d2e09fb779f004791f2b8660
- SHA1
  
  e1af6795a989e479115381dc19c8cd53374d559f
- SHA256
  
  9bf5d93076c610a5a92322c1fba771b3b41f71c57946ff4ebe2f911eca94776e
- SHA512
  
  ec36c9ac7696b637c834b0773502ab2e5faf6c157b231728ac8583f9370cca4b6c32baba1616a3f255c796c309a61fea23d7079dad83c6a9f3a273170bcb8c79
- SSDEEP
  
  12288:JF/hy2TOlQftPh2kkkkK4kXkkkkkkkkl888888888888888888nI:JF5y2TOQlPh2kkkkK4kXkkkkkkkki
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence