9da07c406ba8e4f517330641ae4caf520e9dc55961418ccb9cdc37d7f9c1bf6e | Triage

Sharing

General

Target

99ff3c0a169a2d8380860adaacdce9e0N.exe
Size

384KB
Sample

240824-kkl2yatejp
MD5

99ff3c0a169a2d8380860adaacdce9e0
SHA1

95898a3ba070fb17d8eb24e274004709186681da
SHA256

9da07c406ba8e4f517330641ae4caf520e9dc55961418ccb9cdc37d7f9c1bf6e
SHA512

d15af4b182b2fec65a4c3d0c54b0251ef2cb447bdc2be884f2bb04812cb7cbd3a230c04f842ac47190a7d95614b5b3f524a723f3830de278b2ac88b96ab17ec2
SSDEEP

6144:vT2s+4pui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GAPrY:vJXpV6yYPI3cpV6yYPZ0PVdvcY9+8hka

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  99ff3c0a169a2d8380860adaacdce9e0N.exe
- Size
  
  384KB
- MD5
  
  99ff3c0a169a2d8380860adaacdce9e0
- SHA1
  
  95898a3ba070fb17d8eb24e274004709186681da
- SHA256
  
  9da07c406ba8e4f517330641ae4caf520e9dc55961418ccb9cdc37d7f9c1bf6e
- SHA512
  
  d15af4b182b2fec65a4c3d0c54b0251ef2cb447bdc2be884f2bb04812cb7cbd3a230c04f842ac47190a7d95614b5b3f524a723f3830de278b2ac88b96ab17ec2
- SSDEEP
  
  6144:vT2s+4pui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GAPrY:vJXpV6yYPI3cpV6yYPZ0PVdvcY9+8hka
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence