3be7780f7df49de160b4a05c270adc0517369de3c3610124d01a76c2b1869fd0 | Triage

Sharing

General

Target

31a02f2ae9ea31aa8b851e060b741020N.exe
Size

128KB
Sample

240823-nv6e4ssajd
MD5

31a02f2ae9ea31aa8b851e060b741020
SHA1

65025ba003a51ccb15554b06734f24a017f3584a
SHA256

3be7780f7df49de160b4a05c270adc0517369de3c3610124d01a76c2b1869fd0
SHA512

94a10abb86d4543152d7564e00fdc6a65a55fb45233129109e4b9269067790ca0b2b79bb37ba0a22871ea4bccc20d8e682d560c895776880f69a8efca465846c
SSDEEP

3072:ILRGFJUGIhV2JDro43PvevPxMeEvPOdgujv6NLPfFFrKP9:ILRbGGV2N/vevJML3OdgawrFZKP

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  31a02f2ae9ea31aa8b851e060b741020N.exe
- Size
  
  128KB
- MD5
  
  31a02f2ae9ea31aa8b851e060b741020
- SHA1
  
  65025ba003a51ccb15554b06734f24a017f3584a
- SHA256
  
  3be7780f7df49de160b4a05c270adc0517369de3c3610124d01a76c2b1869fd0
- SHA512
  
  94a10abb86d4543152d7564e00fdc6a65a55fb45233129109e4b9269067790ca0b2b79bb37ba0a22871ea4bccc20d8e682d560c895776880f69a8efca465846c
- SSDEEP
  
  3072:ILRGFJUGIhV2JDro43PvevPxMeEvPOdgujv6NLPfFFrKP9:ILRbGGV2N/vevJML3OdgawrFZKP
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence