566ecfcdaf842968465edd7837b02cc225f951ad9f4592b0ba65235812e3e830 | Triage

Sharing

General

Target

e556d89e4d8c3cefce046ebdc7c9d2a0N.exe
Size

2.2MB
Sample

240823-lecrrawejc
MD5

e556d89e4d8c3cefce046ebdc7c9d2a0
SHA1

9b484b8bfb048b7136991f359d4d1b1fefd54701
SHA256

566ecfcdaf842968465edd7837b02cc225f951ad9f4592b0ba65235812e3e830
SHA512

d7369dcf22cee54561d3fe283bea69cfaa66715451358e2f680c9570424bf03deff2d104fb7b21ce3973db64df527e7a64cc6631a91c3a4bcdb9b00baff2d356
SSDEEP

24576:O0Tq5hM5Dgq5h3q5hL6X1q5h3q5hPPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNb:OUI6BbazR0vKLXZb

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e556d89e4d8c3cefce046ebdc7c9d2a0N.exe
- Size
  
  2.2MB
- MD5
  
  e556d89e4d8c3cefce046ebdc7c9d2a0
- SHA1
  
  9b484b8bfb048b7136991f359d4d1b1fefd54701
- SHA256
  
  566ecfcdaf842968465edd7837b02cc225f951ad9f4592b0ba65235812e3e830
- SHA512
  
  d7369dcf22cee54561d3fe283bea69cfaa66715451358e2f680c9570424bf03deff2d104fb7b21ce3973db64df527e7a64cc6631a91c3a4bcdb9b00baff2d356
- SSDEEP
  
  24576:O0Tq5hM5Dgq5h3q5hL6X1q5h3q5hPPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNb:OUI6BbazR0vKLXZb
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence