7aa0e45130620548a217e411adde0247c7df0ae815e1eb08761a9f9a23b24901 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef84034c1cfeef320182b70ba96cf800N.exe
Size

160KB
Sample

240824-gc6vlawbla
MD5

ef84034c1cfeef320182b70ba96cf800
SHA1

76d96a0b5d358228fe459f86da979cc65031eb81
SHA256

7aa0e45130620548a217e411adde0247c7df0ae815e1eb08761a9f9a23b24901
SHA512

b0c835ac43ec7ff8ab261bdb6e35b189dfd1e857a05a1b8f97d5af031cc1c7f8d434b40162d5b244389ee5474f41ab7a48ce4b600256bd339b6a89f08377cc42
SSDEEP

3072:6Gfwp2A88Wnd9K+LokZZsqfQhUzp4PmebD5Vo3gLJbGFE22VasiZoR6sCtAC8:6Tpy8W6+ThQh+oHbD5W3glbGFIasUDsn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef84034c1cfeef320182b70ba96cf800N.exe
- Size
  
  160KB
- MD5
  
  ef84034c1cfeef320182b70ba96cf800
- SHA1
  
  76d96a0b5d358228fe459f86da979cc65031eb81
- SHA256
  
  7aa0e45130620548a217e411adde0247c7df0ae815e1eb08761a9f9a23b24901
- SHA512
  
  b0c835ac43ec7ff8ab261bdb6e35b189dfd1e857a05a1b8f97d5af031cc1c7f8d434b40162d5b244389ee5474f41ab7a48ce4b600256bd339b6a89f08377cc42
- SSDEEP
  
  3072:6Gfwp2A88Wnd9K+LokZZsqfQhUzp4PmebD5Vo3gLJbGFE22VasiZoR6sCtAC8:6Tpy8W6+ThQh+oHbD5W3glbGFIasUDsn
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence