30502dc1f40278a9ac99bb844f83874311f8de7b87e70c3230b10ced2abacd3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d2dbd63390d0975228a9551bf3e014b0N.exe
Size

188KB
Sample

240824-frgnkswern
MD5

d2dbd63390d0975228a9551bf3e014b0
SHA1

38dda51ce0d6dec2e1fe9cc3028339786f73c0f9
SHA256

30502dc1f40278a9ac99bb844f83874311f8de7b87e70c3230b10ced2abacd3d
SHA512

3d735ad1b2c1a69f10c65af101d619b0b3a7a092d3e6913f2d2bd7a50d7771ff34bfc2506475cad16c46293415337d0783e04c88b7c94134cb9e0b9f2182d549
SSDEEP

3072:O+bmhioeGqWQfYXoMk8vS661AerDtsr3vhqhEN4MAH+mbPepZBC8qzNJSKrDco:OMmhioeGpVk8a661AelhEN4MujGJoSoX

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d2dbd63390d0975228a9551bf3e014b0N.exe
- Size
  
  188KB
- MD5
  
  d2dbd63390d0975228a9551bf3e014b0
- SHA1
  
  38dda51ce0d6dec2e1fe9cc3028339786f73c0f9
- SHA256
  
  30502dc1f40278a9ac99bb844f83874311f8de7b87e70c3230b10ced2abacd3d
- SHA512
  
  3d735ad1b2c1a69f10c65af101d619b0b3a7a092d3e6913f2d2bd7a50d7771ff34bfc2506475cad16c46293415337d0783e04c88b7c94134cb9e0b9f2182d549
- SSDEEP
  
  3072:O+bmhioeGqWQfYXoMk8vS661AerDtsr3vhqhEN4MAH+mbPepZBC8qzNJSKrDco:OMmhioeGpVk8a661AelhEN4MujGJoSoX
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence