eb434845f86f946d9c5122e495ecf0ede0a848d939a22684ca79045b705e75d3 | Triage

Sharing

General

Target

798ad64b287ffc9cfb5f456add667340N.exe
Size

64KB
Sample

240824-29zg1avfrc
MD5

798ad64b287ffc9cfb5f456add667340
SHA1

32da73e2ad384304b51e5efdb630a734f8e9dac3
SHA256

eb434845f86f946d9c5122e495ecf0ede0a848d939a22684ca79045b705e75d3
SHA512

fbba78ad2c1246f2bc26237152ddf6eb6dd5926e3f3b80dfc8a67a3cb450bf77cd4cba3e942fcd78071a62f891eafb231a8c39fafc82c1370edb4f8b8d5212cd
SSDEEP

768:r7ZndOCDJRG3GRjQSm2b4pd8qvJpjO/GurQElyPMseYd/1H5bXdnhgoEqErtE1oW:NVD28m2b4p7piGuQPmYXDV1iL+iALMH6

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  798ad64b287ffc9cfb5f456add667340N.exe
- Size
  
  64KB
- MD5
  
  798ad64b287ffc9cfb5f456add667340
- SHA1
  
  32da73e2ad384304b51e5efdb630a734f8e9dac3
- SHA256
  
  eb434845f86f946d9c5122e495ecf0ede0a848d939a22684ca79045b705e75d3
- SHA512
  
  fbba78ad2c1246f2bc26237152ddf6eb6dd5926e3f3b80dfc8a67a3cb450bf77cd4cba3e942fcd78071a62f891eafb231a8c39fafc82c1370edb4f8b8d5212cd
- SSDEEP
  
  768:r7ZndOCDJRG3GRjQSm2b4pd8qvJpjO/GurQElyPMseYd/1H5bXdnhgoEqErtE1oW:NVD28m2b4p7piGuQPmYXDV1iL+iALMH6
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence