0b9a75ca3e1537a251c986fd70f6997c4cac23883e0f187e51e303163c21c16d | Triage

Sharing

General

Target

973308c7d32ff7c6a5e6f1d38b626520N.exe
Size

362KB
Sample

240823-n6plqsvglm
MD5

973308c7d32ff7c6a5e6f1d38b626520
SHA1

3516047a6e59b6e30c6ead87a148886850e43025
SHA256

0b9a75ca3e1537a251c986fd70f6997c4cac23883e0f187e51e303163c21c16d
SHA512

f98301ab5e43ef0876018e9f2c32586a07e0435a9436350be61c1ba06659543d1d532b15a8e7f86f20b644850fab1f80be5d6ebf8449e706a3641e7ba547f17d
SSDEEP

6144:5ILpEBmI8cPtGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuZxF:5ILpmPtmuMtrQ07nGWxWSsmiMyh95r5z

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  973308c7d32ff7c6a5e6f1d38b626520N.exe
- Size
  
  362KB
- MD5
  
  973308c7d32ff7c6a5e6f1d38b626520
- SHA1
  
  3516047a6e59b6e30c6ead87a148886850e43025
- SHA256
  
  0b9a75ca3e1537a251c986fd70f6997c4cac23883e0f187e51e303163c21c16d
- SHA512
  
  f98301ab5e43ef0876018e9f2c32586a07e0435a9436350be61c1ba06659543d1d532b15a8e7f86f20b644850fab1f80be5d6ebf8449e706a3641e7ba547f17d
- SSDEEP
  
  6144:5ILpEBmI8cPtGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuZxF:5ILpmPtmuMtrQ07nGWxWSsmiMyh95r5z
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence