a66d355f9e0108d85a5b2471f12a9612c531415393ff519b17d522c8dce39440 | Triage

Sharing

General

Target

a60761387fd0f3821bcaf8dc7d035f40N.exe
Size

217KB
Sample

240823-ht87qatamn
MD5

a60761387fd0f3821bcaf8dc7d035f40
SHA1

30d61c0e1a4d9cfdc633bf60c934e6d08986d34b
SHA256

a66d355f9e0108d85a5b2471f12a9612c531415393ff519b17d522c8dce39440
SHA512

51b5d62f6b1d0ee03c843aa7cc682ce34f00a4a787cc04f016acc92f145db4aa436f9174f6fb94472b19a70925407574fb0ffb16f1a50a8f69e80a1589911e7f
SSDEEP

3072:fQ5GKC23Mbd+7NDzm6yGwG02fwtE7AeS5pAgYIqGvJ6887lbyMGjXF1kqaholmt3:fOvckZNrce7AdZMGXF5ahdt3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a60761387fd0f3821bcaf8dc7d035f40N.exe
- Size
  
  217KB
- MD5
  
  a60761387fd0f3821bcaf8dc7d035f40
- SHA1
  
  30d61c0e1a4d9cfdc633bf60c934e6d08986d34b
- SHA256
  
  a66d355f9e0108d85a5b2471f12a9612c531415393ff519b17d522c8dce39440
- SHA512
  
  51b5d62f6b1d0ee03c843aa7cc682ce34f00a4a787cc04f016acc92f145db4aa436f9174f6fb94472b19a70925407574fb0ffb16f1a50a8f69e80a1589911e7f
- SSDEEP
  
  3072:fQ5GKC23Mbd+7NDzm6yGwG02fwtE7AeS5pAgYIqGvJ6887lbyMGjXF1kqaholmt3:fOvckZNrce7AdZMGXF5ahdt3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence