fa3f181fe66233b1ec9f70c208a4c96f859079cbc8c0ea631831a834af16ad7d | Triage

Sharing

General

Target

9a71ce714c19ecc9ccd701ae68577d60N.exe
Size

240KB
Sample

240823-w4eyhszajf
MD5

9a71ce714c19ecc9ccd701ae68577d60
SHA1

399ef5c9c0cccf56f557acfe773dcb6acb15d6d7
SHA256

fa3f181fe66233b1ec9f70c208a4c96f859079cbc8c0ea631831a834af16ad7d
SHA512

b35e67ef511797696dd4ac159196e2626782c9919ee8f40236abd4b34fbbfb60c74dfe68b628c7df88e4a4dcc5168f7d21c7a505d19939cb18b1fb458215453f
SSDEEP

6144:3HmRrjLZmGyZ6YugQdjGG1wsKm6eBgdQbkoKTBEA:3mRAGyXu1jGG1wsGeBgRTGA

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9a71ce714c19ecc9ccd701ae68577d60N.exe
- Size
  
  240KB
- MD5
  
  9a71ce714c19ecc9ccd701ae68577d60
- SHA1
  
  399ef5c9c0cccf56f557acfe773dcb6acb15d6d7
- SHA256
  
  fa3f181fe66233b1ec9f70c208a4c96f859079cbc8c0ea631831a834af16ad7d
- SHA512
  
  b35e67ef511797696dd4ac159196e2626782c9919ee8f40236abd4b34fbbfb60c74dfe68b628c7df88e4a4dcc5168f7d21c7a505d19939cb18b1fb458215453f
- SSDEEP
  
  6144:3HmRrjLZmGyZ6YugQdjGG1wsKm6eBgdQbkoKTBEA:3mRAGyXu1jGG1wsGeBgRTGA
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence