1763507d0f86f8c825156f2ec8391ba82415cb070e4efd38d8d7f7b2fb012565 | Triage

Sharing

General

Target

ef999a6eb3516e11337354d22ce9d570N.exe
Size

1.9MB
Sample

240823-ye4lpavdrq
MD5

ef999a6eb3516e11337354d22ce9d570
SHA1

db9023f740fd71883b38ff0aad0a8ec42639b70d
SHA256

1763507d0f86f8c825156f2ec8391ba82415cb070e4efd38d8d7f7b2fb012565
SHA512

1360e1bb082709c64b916a73fbd2cdce6a244cb0ce93ba0b96d537bb625cbf3ba1301236a5ec8fe1c7c5b98482fe182788c436cf5f4d82a595e307aa8c4e0278
SSDEEP

6144:HM3FVmGpV+PQ///NR5fKr2n0MCRqJ++6yYEwPJ2kEe16L9Jww61EvBqc:HKJ/Ni+6CwUkEoILTAc

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef999a6eb3516e11337354d22ce9d570N.exe
- Size
  
  1.9MB
- MD5
  
  ef999a6eb3516e11337354d22ce9d570
- SHA1
  
  db9023f740fd71883b38ff0aad0a8ec42639b70d
- SHA256
  
  1763507d0f86f8c825156f2ec8391ba82415cb070e4efd38d8d7f7b2fb012565
- SHA512
  
  1360e1bb082709c64b916a73fbd2cdce6a244cb0ce93ba0b96d537bb625cbf3ba1301236a5ec8fe1c7c5b98482fe182788c436cf5f4d82a595e307aa8c4e0278
- SSDEEP
  
  6144:HM3FVmGpV+PQ///NR5fKr2n0MCRqJ++6yYEwPJ2kEe16L9Jww61EvBqc:HKJ/Ni+6CwUkEoILTAc
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence