046f8885218462efdc43747615d4f985ec84d2862ffd5a0fd370174e2541179e | Triage

Sharing

General

Target

09b2fda6aa74d9d820dd0e30ca254270N.exe
Size

100KB
Sample

240824-s4bdjsxblh
MD5

09b2fda6aa74d9d820dd0e30ca254270
SHA1

bf2687743330d7a8de2ec01626ea9085cecbde01
SHA256

046f8885218462efdc43747615d4f985ec84d2862ffd5a0fd370174e2541179e
SHA512

f79361445844058207f901ac8f7ae0a27a6e22c01c9450f44a694bb537e93825472ab2e4fcfc09ab3f0515bd0f81e947c82dcacf1e8d6d919713df88edaf0595
SSDEEP

3072:fBU3wNltn7aGQIn28hXXXqmEgb3a3+X13XRzT:fBdP7Dvn2SXXXqmB7aOl3BzT

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  09b2fda6aa74d9d820dd0e30ca254270N.exe
- Size
  
  100KB
- MD5
  
  09b2fda6aa74d9d820dd0e30ca254270
- SHA1
  
  bf2687743330d7a8de2ec01626ea9085cecbde01
- SHA256
  
  046f8885218462efdc43747615d4f985ec84d2862ffd5a0fd370174e2541179e
- SHA512
  
  f79361445844058207f901ac8f7ae0a27a6e22c01c9450f44a694bb537e93825472ab2e4fcfc09ab3f0515bd0f81e947c82dcacf1e8d6d919713df88edaf0595
- SSDEEP
  
  3072:fBU3wNltn7aGQIn28hXXXqmEgb3a3+X13XRzT:fBdP7Dvn2SXXXqmB7aOl3BzT
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence