c94379ab45e0987a62cd186988e9b16d13ae6288557cbf066c760afd0108f8db | Triage

Sharing

General

Target

ff9f565ecd1550945c47f8b3d38c1140N.exe
Size

80KB
Sample

240823-rwqylazbrc
MD5

ff9f565ecd1550945c47f8b3d38c1140
SHA1

d3ffefc1cac1a66a719a5fbedf154a9f1de09fa1
SHA256

c94379ab45e0987a62cd186988e9b16d13ae6288557cbf066c760afd0108f8db
SHA512

e77c8acbe9385e4125120bfa0ff85d9f42587da5bba4a30d06f8daa9ef90a92ed4e9a9f0969b536a9c1bc85ae11f1da234a66a39c72544e11e31623346a5175c
SSDEEP

1536:gnLi8AsxpXH4fClW6bsz9fVaoP2LnaIZTJ+7LhkiB0:Cu8AqpX4oIz9f6naMU7ui

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ff9f565ecd1550945c47f8b3d38c1140N.exe
- Size
  
  80KB
- MD5
  
  ff9f565ecd1550945c47f8b3d38c1140
- SHA1
  
  d3ffefc1cac1a66a719a5fbedf154a9f1de09fa1
- SHA256
  
  c94379ab45e0987a62cd186988e9b16d13ae6288557cbf066c760afd0108f8db
- SHA512
  
  e77c8acbe9385e4125120bfa0ff85d9f42587da5bba4a30d06f8daa9ef90a92ed4e9a9f0969b536a9c1bc85ae11f1da234a66a39c72544e11e31623346a5175c
- SSDEEP
  
  1536:gnLi8AsxpXH4fClW6bsz9fVaoP2LnaIZTJ+7LhkiB0:Cu8AqpX4oIz9f6naMU7ui
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence