f23f6e3e5771ed36845c8b67956f0c01722b9030baa999e8bdaf22f4aa4e76af | Triage

Sharing

General

Target

3b3f674a5907c486eb3c80bf1bc12020N.exe
Size

95KB
Sample

240823-k4km8avhka
MD5

3b3f674a5907c486eb3c80bf1bc12020
SHA1

fc579d293d13253030314c6f0789c54bc2df678f
SHA256

f23f6e3e5771ed36845c8b67956f0c01722b9030baa999e8bdaf22f4aa4e76af
SHA512

4f6fe2f88db7bb0c2b03e75a8ef7abda39c9dfe0b21034e85796fdacae6ea5c856c12d08e897ae2dc69ba5c60b76026bd5d26efb8fbf1b8e1f026b13fd2ff60a
SSDEEP

1536:V59xMSkNL4g5OzvqrTVQfFiW8dcXJ98IRCmvidJxL4qozO8AUPDkOM6bOLXi8Pm2:X90RPlQkDdGKmvo/KVAUPDkDrLXfzoeV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3b3f674a5907c486eb3c80bf1bc12020N.exe
- Size
  
  95KB
- MD5
  
  3b3f674a5907c486eb3c80bf1bc12020
- SHA1
  
  fc579d293d13253030314c6f0789c54bc2df678f
- SHA256
  
  f23f6e3e5771ed36845c8b67956f0c01722b9030baa999e8bdaf22f4aa4e76af
- SHA512
  
  4f6fe2f88db7bb0c2b03e75a8ef7abda39c9dfe0b21034e85796fdacae6ea5c856c12d08e897ae2dc69ba5c60b76026bd5d26efb8fbf1b8e1f026b13fd2ff60a
- SSDEEP
  
  1536:V59xMSkNL4g5OzvqrTVQfFiW8dcXJ98IRCmvidJxL4qozO8AUPDkOM6bOLXi8Pm2:X90RPlQkDdGKmvo/KVAUPDkDrLXfzoeV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence