a36de8fa4b453fb9926ee324b2fb9277a2d4d3fde8f93c29a95544386e3508c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a7369aa9f0e2c7ff0ef2b268c8d863d0N.exe
Size

94KB
Sample

240823-bm5gmazfpr
MD5

a7369aa9f0e2c7ff0ef2b268c8d863d0
SHA1

1aa2620247de7b97770e98827a696ebc364e1c99
SHA256

a36de8fa4b453fb9926ee324b2fb9277a2d4d3fde8f93c29a95544386e3508c4
SHA512

742899b5bd6a70a1255098ac8d9c28b974c32c72bde825d6584fcec7062e0eb34d78bb770f989e958fc2479b90352959f98d54d6307f14d44e3b7bae0463be4c
SSDEEP

1536:M0fNqnIpSZV7dXGeZtoTqT4QyMuKj0eXfh+8rCHylU7BR9L4DT2EnINs:rqnIpS77dWeDTj3j085+QCHylU6+ob

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a7369aa9f0e2c7ff0ef2b268c8d863d0N.exe
- Size
  
  94KB
- MD5
  
  a7369aa9f0e2c7ff0ef2b268c8d863d0
- SHA1
  
  1aa2620247de7b97770e98827a696ebc364e1c99
- SHA256
  
  a36de8fa4b453fb9926ee324b2fb9277a2d4d3fde8f93c29a95544386e3508c4
- SHA512
  
  742899b5bd6a70a1255098ac8d9c28b974c32c72bde825d6584fcec7062e0eb34d78bb770f989e958fc2479b90352959f98d54d6307f14d44e3b7bae0463be4c
- SSDEEP
  
  1536:M0fNqnIpSZV7dXGeZtoTqT4QyMuKj0eXfh+8rCHylU7BR9L4DT2EnINs:rqnIpS77dWeDTj3j085+QCHylU6+ob
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence