e840b980df223f3e629cda0980100bf801920f78847420215c6ec838e67e0a74 | Triage

Sharing

General

Target

ea624e1f0d71e41a0a5b739715171a10N.exe
Size

93KB
Sample

240822-yq66ysvfje
MD5

ea624e1f0d71e41a0a5b739715171a10
SHA1

9b32f29d2a2801f89acb56aedbce4941060d42b3
SHA256

e840b980df223f3e629cda0980100bf801920f78847420215c6ec838e67e0a74
SHA512

a8736f03fe0daf76294995e01b73b8440278e3a3421380336f66e2bdb755afa42a67512c51fb6990db7bdf0a853a3207a227fa91d3d2a3cb173c877d3233adc5
SSDEEP

1536:JeMZJTPt2ShgMT0GjXtEpyUiaw1fxz24Sw1TQjiwg58:Q2l2QgOt964h1UY58

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ea624e1f0d71e41a0a5b739715171a10N.exe
- Size
  
  93KB
- MD5
  
  ea624e1f0d71e41a0a5b739715171a10
- SHA1
  
  9b32f29d2a2801f89acb56aedbce4941060d42b3
- SHA256
  
  e840b980df223f3e629cda0980100bf801920f78847420215c6ec838e67e0a74
- SHA512
  
  a8736f03fe0daf76294995e01b73b8440278e3a3421380336f66e2bdb755afa42a67512c51fb6990db7bdf0a853a3207a227fa91d3d2a3cb173c877d3233adc5
- SSDEEP
  
  1536:JeMZJTPt2ShgMT0GjXtEpyUiaw1fxz24Sw1TQjiwg58:Q2l2QgOt964h1UY58
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence