c23d3c711f664012fc7ab025d8b89904345b366d9b7cba3bd272d5d19989ba30 | Triage

Sharing

General

Target

b8474149aa2be2e650ce5468bc6f4dc0N.exe
Size

93KB
Sample

240823-qcaa3avgrh
MD5

b8474149aa2be2e650ce5468bc6f4dc0
SHA1

c991983801c381f8355792867e763be702f14731
SHA256

c23d3c711f664012fc7ab025d8b89904345b366d9b7cba3bd272d5d19989ba30
SHA512

ca8c31da629e1a86b3d6a591dd3c27f7d0c1faed4388d4dee4fe0301645e64cecc34101c4fc7aaaa159d46d9a772c94a8ed8f2659cf1ae0357e4821a683d0dba
SSDEEP

1536:meB4AgZ4wiNWREPRh/woZ+n7+spQF+9wsK5YgsRQNRkRLJzeLD9N0iQGRNQR8Ryn:mC4H8WRO3Un9s5MeNSJdEN0s4WE+3K

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b8474149aa2be2e650ce5468bc6f4dc0N.exe
- Size
  
  93KB
- MD5
  
  b8474149aa2be2e650ce5468bc6f4dc0
- SHA1
  
  c991983801c381f8355792867e763be702f14731
- SHA256
  
  c23d3c711f664012fc7ab025d8b89904345b366d9b7cba3bd272d5d19989ba30
- SHA512
  
  ca8c31da629e1a86b3d6a591dd3c27f7d0c1faed4388d4dee4fe0301645e64cecc34101c4fc7aaaa159d46d9a772c94a8ed8f2659cf1ae0357e4821a683d0dba
- SSDEEP
  
  1536:meB4AgZ4wiNWREPRh/woZ+n7+spQF+9wsK5YgsRQNRkRLJzeLD9N0iQGRNQR8Ryn:mC4H8WRO3Un9s5MeNSJdEN0s4WE+3K
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence