645fe0414869f0aa27190ac17727c231bf30f67f5f8958a935ea26ec6d34b908 | Triage

Sharing

General

Target

369efaa9818cf53314c9a85b66341530N.exe
Size

94KB
Sample

240822-v61sbsyhnf
MD5

369efaa9818cf53314c9a85b66341530
SHA1

4acd87f3884db5d00ac713519b42f1c5fd493f4f
SHA256

645fe0414869f0aa27190ac17727c231bf30f67f5f8958a935ea26ec6d34b908
SHA512

c8e215ca08917df5b769e57d87efe394d5b883072c73c0e0ff91eaf44b15a650f70b51aa7fdd841460c9a65e5072241722dc7f7829b8e88b010d96599a2705e9
SSDEEP

1536:Cyl21o8c/GUMDvZR6R8UL7WhNLDdOS6uKqKo4UjjA2LZlS5DUHRbPa9b6i+sImo/:/21o8DKyNLDttHKo4UpzS5DSCopsIm8z

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  369efaa9818cf53314c9a85b66341530N.exe
- Size
  
  94KB
- MD5
  
  369efaa9818cf53314c9a85b66341530
- SHA1
  
  4acd87f3884db5d00ac713519b42f1c5fd493f4f
- SHA256
  
  645fe0414869f0aa27190ac17727c231bf30f67f5f8958a935ea26ec6d34b908
- SHA512
  
  c8e215ca08917df5b769e57d87efe394d5b883072c73c0e0ff91eaf44b15a650f70b51aa7fdd841460c9a65e5072241722dc7f7829b8e88b010d96599a2705e9
- SSDEEP
  
  1536:Cyl21o8c/GUMDvZR6R8UL7WhNLDdOS6uKqKo4UjjA2LZlS5DUHRbPa9b6i+sImo/:/21o8DKyNLDttHKo4UpzS5DSCopsIm8z
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence