92752b590e57baca6b14298ef46367da302dfc495740b1beb8f3da3b2df53594 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea205f92f9637f8a4117db8609e258d0N.exe
Size

512KB
Sample

240823-cerq8ssanl
MD5

ea205f92f9637f8a4117db8609e258d0
SHA1

775160ba7da21e669116047f8c2d5fdd8a5c488e
SHA256

92752b590e57baca6b14298ef46367da302dfc495740b1beb8f3da3b2df53594
SHA512

598f572cf922eaec18652bd106be4efaa3f083e1d20da8b5ae6a24a11d73487850875b1e9fd7242a6c0ec2d8d58ad1f3d25432f3635df87997fdb14bc0d6015c
SSDEEP

6144:nD5kEA/MnX14v5kxDHBFLqWjjgwTgZLnSnLs:nD5kdMnFntHBFLPj3TmLnWs

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ea205f92f9637f8a4117db8609e258d0N.exe
- Size
  
  512KB
- MD5
  
  ea205f92f9637f8a4117db8609e258d0
- SHA1
  
  775160ba7da21e669116047f8c2d5fdd8a5c488e
- SHA256
  
  92752b590e57baca6b14298ef46367da302dfc495740b1beb8f3da3b2df53594
- SHA512
  
  598f572cf922eaec18652bd106be4efaa3f083e1d20da8b5ae6a24a11d73487850875b1e9fd7242a6c0ec2d8d58ad1f3d25432f3635df87997fdb14bc0d6015c
- SSDEEP
  
  6144:nD5kEA/MnX14v5kxDHBFLqWjjgwTgZLnSnLs:nD5kdMnFntHBFLPj3TmLnWs
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence