0a8f6abf2d43d3eaef4b6f046ff22082e81a85cabd1ba853bb6bd4195dcd8002 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4882932c18da8cda90ca99dd12b1cf0N.exe
Size

199KB
Sample

240822-tpem4ayelq
MD5

e4882932c18da8cda90ca99dd12b1cf0
SHA1

472beaabffb31437be2971391bae3c56b48b44df
SHA256

0a8f6abf2d43d3eaef4b6f046ff22082e81a85cabd1ba853bb6bd4195dcd8002
SHA512

53379da380b061b55887ffb5fe933f0200889778244f133c1fea72b41792043658e93c1fe5cb7638ee3a17a05dc426a7ed368df6f3546f8cfc17ce663f0cdde9
SSDEEP

6144:C0dNL3evSZSCZj81+jq4peBK034YOmFz1h:bLvZSCG1+jheBbOmFxh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e4882932c18da8cda90ca99dd12b1cf0N.exe
- Size
  
  199KB
- MD5
  
  e4882932c18da8cda90ca99dd12b1cf0
- SHA1
  
  472beaabffb31437be2971391bae3c56b48b44df
- SHA256
  
  0a8f6abf2d43d3eaef4b6f046ff22082e81a85cabd1ba853bb6bd4195dcd8002
- SHA512
  
  53379da380b061b55887ffb5fe933f0200889778244f133c1fea72b41792043658e93c1fe5cb7638ee3a17a05dc426a7ed368df6f3546f8cfc17ce663f0cdde9
- SSDEEP
  
  6144:C0dNL3evSZSCZj81+jq4peBK034YOmFz1h:bLvZSCG1+jheBbOmFxh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence