fd793dfb4e81dd222b6d8e172e76b2e8f59829f1b410d23a93a5c95f64d34813 | Triage

Sharing

General

Target

fd72fe7daccd213859d49d597fd3af80N.exe
Size

242KB
Sample

240823-qdrlqsyamm
MD5

fd72fe7daccd213859d49d597fd3af80
SHA1

d476f8403f8b136f54b38c21561f683a1b269e53
SHA256

fd793dfb4e81dd222b6d8e172e76b2e8f59829f1b410d23a93a5c95f64d34813
SHA512

38d14d32a7c34df775b78d606dce40bc4daea2e32c20d6ca14f1a45fbb680f3a8fec2418ded904b9b2bc6f0f705fa0d1587c66d012d54e6b03993aa9ab696bc8
SSDEEP

3072:PD+ZkqTZCoV6V8ZLB6V16VKcWmjRrzKbKcWmjRrzK8VHkdYaM88KC:PD+ZkSCoV66LB6X62UyHEYa0

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fd72fe7daccd213859d49d597fd3af80N.exe
- Size
  
  242KB
- MD5
  
  fd72fe7daccd213859d49d597fd3af80
- SHA1
  
  d476f8403f8b136f54b38c21561f683a1b269e53
- SHA256
  
  fd793dfb4e81dd222b6d8e172e76b2e8f59829f1b410d23a93a5c95f64d34813
- SHA512
  
  38d14d32a7c34df775b78d606dce40bc4daea2e32c20d6ca14f1a45fbb680f3a8fec2418ded904b9b2bc6f0f705fa0d1587c66d012d54e6b03993aa9ab696bc8
- SSDEEP
  
  3072:PD+ZkqTZCoV6V8ZLB6V16VKcWmjRrzKbKcWmjRrzK8VHkdYaM88KC:PD+ZkSCoV66LB6X62UyHEYa0
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence