5bb874d79a7886f32740d33a4a6d2d40718ddbedd736649911b5c611eac4bea8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c445f1f1eed509f7f3cf16918435c10N.exe
Size

380KB
Sample

240822-qaf1tsybla
MD5

8c445f1f1eed509f7f3cf16918435c10
SHA1

8db8e237acf930352de922aa15cd9b16de66e0b6
SHA256

5bb874d79a7886f32740d33a4a6d2d40718ddbedd736649911b5c611eac4bea8
SHA512

0a012de906559b9bf0afe53b10d9c6248e05e273c19e844e3f18c06492ad2e8ccfb9bc6673191d260b0453a8c16e88a44c4917551e3b56780b0403789c731dc0
SSDEEP

6144:htuMqJuCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:htuMqhOtoq5t6NSN6G5tbt5t6NSN6T

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8c445f1f1eed509f7f3cf16918435c10N.exe
- Size
  
  380KB
- MD5
  
  8c445f1f1eed509f7f3cf16918435c10
- SHA1
  
  8db8e237acf930352de922aa15cd9b16de66e0b6
- SHA256
  
  5bb874d79a7886f32740d33a4a6d2d40718ddbedd736649911b5c611eac4bea8
- SHA512
  
  0a012de906559b9bf0afe53b10d9c6248e05e273c19e844e3f18c06492ad2e8ccfb9bc6673191d260b0453a8c16e88a44c4917551e3b56780b0403789c731dc0
- SSDEEP
  
  6144:htuMqJuCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:htuMqhOtoq5t6NSN6G5tbt5t6NSN6T
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence