c370e4e6169283dc188367f604f40aeaf32d2a5e339955780c0def497ddaec5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2116d0a47b8e676237418d21aa58e20N.exe
Size

64KB
Sample

240823-xjzmvszhqd
MD5

c2116d0a47b8e676237418d21aa58e20
SHA1

23e879d0e76aa62903815f5419f59f59c2039661
SHA256

c370e4e6169283dc188367f604f40aeaf32d2a5e339955780c0def497ddaec5e
SHA512

7aa46d995fc2158cdf44b4d84f942dc81ab8f469e4421a2a28ddf9d42f6f262a9d229fbf04776529c1e08f7a3b73980deb94b3297b00d73ef65af65acdf5aa37
SSDEEP

1536:ncyiGQn2Bix/g2UNUl4e6OiU4MzDZ1ZoV1iL+iALMH6:cTGQn2Bix/g2UNUl4e6OxD6V1iL+9Ma

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c2116d0a47b8e676237418d21aa58e20N.exe
- Size
  
  64KB
- MD5
  
  c2116d0a47b8e676237418d21aa58e20
- SHA1
  
  23e879d0e76aa62903815f5419f59f59c2039661
- SHA256
  
  c370e4e6169283dc188367f604f40aeaf32d2a5e339955780c0def497ddaec5e
- SHA512
  
  7aa46d995fc2158cdf44b4d84f942dc81ab8f469e4421a2a28ddf9d42f6f262a9d229fbf04776529c1e08f7a3b73980deb94b3297b00d73ef65af65acdf5aa37
- SSDEEP
  
  1536:ncyiGQn2Bix/g2UNUl4e6OiU4MzDZ1ZoV1iL+iALMH6:cTGQn2Bix/g2UNUl4e6OxD6V1iL+9Ma
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence