14d08d71b9b989dfe821b36cd2183aea6237ee61581cb47e4bbade8d40e44e6c | Triage

Sharing

General

Target

d2afdc580b0f7e6aa58b0a2f6aea0630N.exe
Size

224KB
Sample

240822-rdeslstcqj
MD5

d2afdc580b0f7e6aa58b0a2f6aea0630
SHA1

39ebeea63ee014ab52d6fd625c193223c9e54c7a
SHA256

14d08d71b9b989dfe821b36cd2183aea6237ee61581cb47e4bbade8d40e44e6c
SHA512

883d5221ee4f5b4bb2b23b708c5686daf2e4131defc8aaad0e42d342eb90c6aa74b6eeeb1d1901264fe7be94009375e0a5d5eba012e8ba589ca238cd701a16b5
SSDEEP

3072:Sw2LWdpw6IuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:Sw+WfwS4s5tTDUZNSN58VU5tTtf

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d2afdc580b0f7e6aa58b0a2f6aea0630N.exe
- Size
  
  224KB
- MD5
  
  d2afdc580b0f7e6aa58b0a2f6aea0630
- SHA1
  
  39ebeea63ee014ab52d6fd625c193223c9e54c7a
- SHA256
  
  14d08d71b9b989dfe821b36cd2183aea6237ee61581cb47e4bbade8d40e44e6c
- SHA512
  
  883d5221ee4f5b4bb2b23b708c5686daf2e4131defc8aaad0e42d342eb90c6aa74b6eeeb1d1901264fe7be94009375e0a5d5eba012e8ba589ca238cd701a16b5
- SSDEEP
  
  3072:Sw2LWdpw6IuYUvIMDrFDHZtOgxBOXXwwfBoD6N3h8N5G2qVUDrFDHZtOgtSU:Sw+WfwS4s5tTDUZNSN58VU5tTtf
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence