29b1597fe2025bbd47ba216017ac8b69b242d33f4ff088f4f88315a2c2679125 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed865925e14b7e2affa04e252266850N.exe
Size

459KB
Sample

240823-1erm8sxhmf
MD5

bed865925e14b7e2affa04e252266850
SHA1

d0d40bc21bd00f6085846c5212ca2768f7ebe62c
SHA256

29b1597fe2025bbd47ba216017ac8b69b242d33f4ff088f4f88315a2c2679125
SHA512

4abad0f3f14a5210a229b52eaac6b5d3928d76912ad9d96c6963a0b3dfec8b47e008418e8e55e771624b5746233fd581caef44ec2a5ee81d3c48c05619b5bf10
SSDEEP

6144:Ivo7/MwGsmLrZNs/VKi/MwGsmLr5+Nod/MwGsmLrZNs/VKi/MwGsmLrRo68lS:E+MmmpNs/VXMmmg8MmmpNs/VXMmm

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bed865925e14b7e2affa04e252266850N.exe
- Size
  
  459KB
- MD5
  
  bed865925e14b7e2affa04e252266850
- SHA1
  
  d0d40bc21bd00f6085846c5212ca2768f7ebe62c
- SHA256
  
  29b1597fe2025bbd47ba216017ac8b69b242d33f4ff088f4f88315a2c2679125
- SHA512
  
  4abad0f3f14a5210a229b52eaac6b5d3928d76912ad9d96c6963a0b3dfec8b47e008418e8e55e771624b5746233fd581caef44ec2a5ee81d3c48c05619b5bf10
- SSDEEP
  
  6144:Ivo7/MwGsmLrZNs/VKi/MwGsmLr5+Nod/MwGsmLrZNs/VKi/MwGsmLrRo68lS:E+MmmpNs/VXMmmg8MmmpNs/VXMmm
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence