deb63489cb72fabd9839b85ff9cde6004a23931e370b846810f689dde1832ea3 | Triage

Sharing

General

Target

f51ab55da9fbb3cfcae8314d0bb5f390N.exe
Size

276KB
Sample

240822-sen84stbme
MD5

f51ab55da9fbb3cfcae8314d0bb5f390
SHA1

39ab4ad4f41ba10a23ae032c4eebc7ba753c4220
SHA256

deb63489cb72fabd9839b85ff9cde6004a23931e370b846810f689dde1832ea3
SHA512

bab4c1c09afbaa312f39ea612544958e2c79714066c12d4ba6341997a3e75da1f7b9809123eebf63a04e8372780f8e537e7dfae5fd5e118ff517ed5e05cc27af
SSDEEP

6144:tj2MdnCVxrdWZHEFJ7aWN1rtMsQBOSGaF+:tj2CWv2HEGWN1RMs1S7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f51ab55da9fbb3cfcae8314d0bb5f390N.exe
- Size
  
  276KB
- MD5
  
  f51ab55da9fbb3cfcae8314d0bb5f390
- SHA1
  
  39ab4ad4f41ba10a23ae032c4eebc7ba753c4220
- SHA256
  
  deb63489cb72fabd9839b85ff9cde6004a23931e370b846810f689dde1832ea3
- SHA512
  
  bab4c1c09afbaa312f39ea612544958e2c79714066c12d4ba6341997a3e75da1f7b9809123eebf63a04e8372780f8e537e7dfae5fd5e118ff517ed5e05cc27af
- SSDEEP
  
  6144:tj2MdnCVxrdWZHEFJ7aWN1rtMsQBOSGaF+:tj2CWv2HEGWN1RMs1S7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence