2b617401a925ab636328afb6e1ce2d155430b16c713986d6455c87a6b48d88d7 | Triage

Sharing

General

Target

86ec154cbd68629c28e03ad431a56520N.exe
Size

422KB
Sample

240823-lsyalszbln
MD5

86ec154cbd68629c28e03ad431a56520
SHA1

31ff732736279cb74e153f9b73e24d81cad0b3bf
SHA256

2b617401a925ab636328afb6e1ce2d155430b16c713986d6455c87a6b48d88d7
SHA512

b82c79998c679b6bad9c8c192b1bab42a23a578f19e727b9b9ff08f0f1df895af3ce8ee9cfdc59c77cf0c3e439025b94d2469977d8d729dad1d2272ebe16baf9
SSDEEP

6144:xvM5TtXbabO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:tM5TNGaXgA4XfczXgA4XA

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  86ec154cbd68629c28e03ad431a56520N.exe
- Size
  
  422KB
- MD5
  
  86ec154cbd68629c28e03ad431a56520
- SHA1
  
  31ff732736279cb74e153f9b73e24d81cad0b3bf
- SHA256
  
  2b617401a925ab636328afb6e1ce2d155430b16c713986d6455c87a6b48d88d7
- SHA512
  
  b82c79998c679b6bad9c8c192b1bab42a23a578f19e727b9b9ff08f0f1df895af3ce8ee9cfdc59c77cf0c3e439025b94d2469977d8d729dad1d2272ebe16baf9
- SSDEEP
  
  6144:xvM5TtXbabO6FSPnvZU1AF+6FSPnvZhDYsKKo6FSPnvZU1AF+6FSPnvZq:tM5TNGaXgA4XfczXgA4XA
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence