ea36566961db00d9e7eca043d1953af638ca4f6155f1736844e55d61b04223ec | Triage

Sharing

General

Target

f3473a92eb943016446c13ab1ad34560N.exe
Size

512KB
Sample

240823-bzyvlsydpg
MD5

f3473a92eb943016446c13ab1ad34560
SHA1

f2c89fe0ac1dffb5c667308d7fb4a1ef9ac6d591
SHA256

ea36566961db00d9e7eca043d1953af638ca4f6155f1736844e55d61b04223ec
SHA512

026283ecf12ffcceb06edd1c23adc890f6268bf6adf838df08cc4bf06a0baee8987ced32245a9a2987d5947635419b63503fe9303d197f8887f3c30bb157c823
SSDEEP

6144:HQ8AhSZvuz853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:HDUQBpnchWcZ

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f3473a92eb943016446c13ab1ad34560N.exe
- Size
  
  512KB
- MD5
  
  f3473a92eb943016446c13ab1ad34560
- SHA1
  
  f2c89fe0ac1dffb5c667308d7fb4a1ef9ac6d591
- SHA256
  
  ea36566961db00d9e7eca043d1953af638ca4f6155f1736844e55d61b04223ec
- SHA512
  
  026283ecf12ffcceb06edd1c23adc890f6268bf6adf838df08cc4bf06a0baee8987ced32245a9a2987d5947635419b63503fe9303d197f8887f3c30bb157c823
- SSDEEP
  
  6144:HQ8AhSZvuz853XBpnTfwNPbAvjDAcXxxXfY09cnEWPDZ:HDUQBpnchWcZ
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence