ab6b5c48c2aa70cab42130867faceba719b42d1d74a9c3ee60acafee8b4fd40f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a6a1d350ba51d3a7ff1d63a30254fda0N.exe
Size

377KB
Sample

240824-l2gzzsvcla
MD5

a6a1d350ba51d3a7ff1d63a30254fda0
SHA1

a0716789082ba8a336e79078c4e7c55f63a8f912
SHA256

ab6b5c48c2aa70cab42130867faceba719b42d1d74a9c3ee60acafee8b4fd40f
SHA512

7f7451ff806d0e7a6498ef24520316a8d17992c7c88ac285b5e2a12076b18d7476a0fc7308ed11bbfc0248452077f6636f2b1149506a80d8e310f5f3cff7c8f8
SSDEEP

6144:gd2wZH2LyA/HNp5OBGSgnohijgAUv5fKx/SgnohignC5V:gdLH2LyGO+dMTv5i1dayV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6a1d350ba51d3a7ff1d63a30254fda0N.exe
- Size
  
  377KB
- MD5
  
  a6a1d350ba51d3a7ff1d63a30254fda0
- SHA1
  
  a0716789082ba8a336e79078c4e7c55f63a8f912
- SHA256
  
  ab6b5c48c2aa70cab42130867faceba719b42d1d74a9c3ee60acafee8b4fd40f
- SHA512
  
  7f7451ff806d0e7a6498ef24520316a8d17992c7c88ac285b5e2a12076b18d7476a0fc7308ed11bbfc0248452077f6636f2b1149506a80d8e310f5f3cff7c8f8
- SSDEEP
  
  6144:gd2wZH2LyA/HNp5OBGSgnohijgAUv5fKx/SgnohignC5V:gdLH2LyGO+dMTv5i1dayV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence