c5809d7bd574b3bb87b1e35aa753d3b25f7557d31a9cd867a539d091d29d0eba | Triage

Sharing

General

Target

a3aead85728eb8d3e98611dc7a0607e0N.exe
Size

1.5MB
Sample

240823-fjtyyawejd
MD5

a3aead85728eb8d3e98611dc7a0607e0
SHA1

399bebc056299dee6ca0c8cbe63ff2e8016b5767
SHA256

c5809d7bd574b3bb87b1e35aa753d3b25f7557d31a9cd867a539d091d29d0eba
SHA512

4f7ef9544212c1591c3e2f6fb9bf0973e780ab9c3ad9b0ce4950d7f0613cf6b1660e0cb5a58cbe238bb20f55336feda05634c8b0ea2de7b63e64eec88f8ecbf1
SSDEEP

12288:bRPbWGRdA6sQxuEuZH8WF50+OJ3BHCXwpnsKvNA+XTvZHWuEo3oWB+:9zecI50+YNpsKv2EvZHp3oWB+

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a3aead85728eb8d3e98611dc7a0607e0N.exe
- Size
  
  1.5MB
- MD5
  
  a3aead85728eb8d3e98611dc7a0607e0
- SHA1
  
  399bebc056299dee6ca0c8cbe63ff2e8016b5767
- SHA256
  
  c5809d7bd574b3bb87b1e35aa753d3b25f7557d31a9cd867a539d091d29d0eba
- SHA512
  
  4f7ef9544212c1591c3e2f6fb9bf0973e780ab9c3ad9b0ce4950d7f0613cf6b1660e0cb5a58cbe238bb20f55336feda05634c8b0ea2de7b63e64eec88f8ecbf1
- SSDEEP
  
  12288:bRPbWGRdA6sQxuEuZH8WF50+OJ3BHCXwpnsKvNA+XTvZHWuEo3oWB+:9zecI50+YNpsKv2EvZHp3oWB+
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence