2b9ab4fb58a8e532b06861e397d9bd696cce472d6cac66c13c04319a5140d58c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbb7fc7386e2fedd537a5224e6ba1520N.exe
Size

236KB
Sample

240823-cv347szhqg
MD5

fbb7fc7386e2fedd537a5224e6ba1520
SHA1

3bba533f276ae227ed924c9785340753ad5d77d2
SHA256

2b9ab4fb58a8e532b06861e397d9bd696cce472d6cac66c13c04319a5140d58c
SHA512

de4a88a7f0eb67888ac4bbb0da739d245735d2ca9b9690437c7694937abf242836de37eb57d2c3e83e821f347ed2d55ef31ff66cc8fb225f8e849f644103dc08
SSDEEP

3072:mATYR6PDNcPJ9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:t2WNcPsDshsrtMsQB4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fbb7fc7386e2fedd537a5224e6ba1520N.exe
- Size
  
  236KB
- MD5
  
  fbb7fc7386e2fedd537a5224e6ba1520
- SHA1
  
  3bba533f276ae227ed924c9785340753ad5d77d2
- SHA256
  
  2b9ab4fb58a8e532b06861e397d9bd696cce472d6cac66c13c04319a5140d58c
- SHA512
  
  de4a88a7f0eb67888ac4bbb0da739d245735d2ca9b9690437c7694937abf242836de37eb57d2c3e83e821f347ed2d55ef31ff66cc8fb225f8e849f644103dc08
- SSDEEP
  
  3072:mATYR6PDNcPJ9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:t2WNcPsDshsrtMsQB4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence