b2c6055b8859f79d44aad13534bbc54cc8587304ef32802b63def891ac5fe875 | Triage

Sharing

General

Target

a9fc279c4866fd115f4393c846f970f0N.exe
Size

112KB
Sample

240823-hb77psscrj
MD5

a9fc279c4866fd115f4393c846f970f0
SHA1

819254656d73aeb87db06779209616d29da9a951
SHA256

b2c6055b8859f79d44aad13534bbc54cc8587304ef32802b63def891ac5fe875
SHA512

b32859945ea640b13c9170db245f24c9a56373b4c882061a3b0cc3a3ef5fb9bd3dda96a48e522b9b45dbbc2aaab38e150282959d1426c65c8ab83ee0f5b30c52
SSDEEP

3072:OTVAkCZaxYHTkMQH2qC7ZQOlzSLUK6MwGsGnDc9o:O2kTGHIMQWfdQOhwJ6MwGsw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a9fc279c4866fd115f4393c846f970f0N.exe
- Size
  
  112KB
- MD5
  
  a9fc279c4866fd115f4393c846f970f0
- SHA1
  
  819254656d73aeb87db06779209616d29da9a951
- SHA256
  
  b2c6055b8859f79d44aad13534bbc54cc8587304ef32802b63def891ac5fe875
- SHA512
  
  b32859945ea640b13c9170db245f24c9a56373b4c882061a3b0cc3a3ef5fb9bd3dda96a48e522b9b45dbbc2aaab38e150282959d1426c65c8ab83ee0f5b30c52
- SSDEEP
  
  3072:OTVAkCZaxYHTkMQH2qC7ZQOlzSLUK6MwGsGnDc9o:O2kTGHIMQWfdQOhwJ6MwGsw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence