8b10b3298016ddb9f243980c59af1d149cee3e23155a934a3953d3de93f89632 | Triage

Sharing

General

Target

c7220f2ff3303cd0c766e587ebcf7b80N.exe
Size

391KB
Sample

240824-ktpjesthkr
MD5

c7220f2ff3303cd0c766e587ebcf7b80
SHA1

30d226c68b81784b54e2418e4cd8101088cee560
SHA256

8b10b3298016ddb9f243980c59af1d149cee3e23155a934a3953d3de93f89632
SHA512

d5af5e04ba3a2be644a458425c40459f7378bc27648fe2a18bec419181b022d60b98964242c9a80adb4e0f5172943aa1c8da6d63291dfc0930556f3a41f6e7a6
SSDEEP

6144:33uiLKLmBSqoU5uzwaAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:33uimL4kU5uAmNtuhUNP3cOK3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c7220f2ff3303cd0c766e587ebcf7b80N.exe
- Size
  
  391KB
- MD5
  
  c7220f2ff3303cd0c766e587ebcf7b80
- SHA1
  
  30d226c68b81784b54e2418e4cd8101088cee560
- SHA256
  
  8b10b3298016ddb9f243980c59af1d149cee3e23155a934a3953d3de93f89632
- SHA512
  
  d5af5e04ba3a2be644a458425c40459f7378bc27648fe2a18bec419181b022d60b98964242c9a80adb4e0f5172943aa1c8da6d63291dfc0930556f3a41f6e7a6
- SSDEEP
  
  6144:33uiLKLmBSqoU5uzwaAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:33uimL4kU5uAmNtuhUNP3cOK3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence