e253472cef37f692227d0afdfa37ab61291393eaff6f6a01bf48169db50ff925 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3be9653ca083a97799f5a66cdecddf70N.exe
Size

80KB
Sample

240823-k3gvyavgng
MD5

3be9653ca083a97799f5a66cdecddf70
SHA1

1384340e9dbad58dab9c7b5d6419e7f722eb7ea4
SHA256

e253472cef37f692227d0afdfa37ab61291393eaff6f6a01bf48169db50ff925
SHA512

52d5696d85af9fb5851d626f9d4a4b9196f39453097459df8abe20c11c321cced8aa9b846dcc9ca7288cbabaae4c27dd33351f07300ae2d63e0889aa5c3f21c5
SSDEEP

1536:LLwCWQMx/kAFa889TQJFCbX2LdZJ9VqDlzVxyh+CbxMa:NWQe/Don8JFe8TJ9IDlRxyhTb7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3be9653ca083a97799f5a66cdecddf70N.exe
- Size
  
  80KB
- MD5
  
  3be9653ca083a97799f5a66cdecddf70
- SHA1
  
  1384340e9dbad58dab9c7b5d6419e7f722eb7ea4
- SHA256
  
  e253472cef37f692227d0afdfa37ab61291393eaff6f6a01bf48169db50ff925
- SHA512
  
  52d5696d85af9fb5851d626f9d4a4b9196f39453097459df8abe20c11c321cced8aa9b846dcc9ca7288cbabaae4c27dd33351f07300ae2d63e0889aa5c3f21c5
- SSDEEP
  
  1536:LLwCWQMx/kAFa889TQJFCbX2LdZJ9VqDlzVxyh+CbxMa:NWQe/Don8JFe8TJ9IDlRxyhTb7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence