2479ac33ea99465cce5be79338525b329ee17a78715432635e70aa92338a1c16 | Triage

Sharing

General

Target

f51ddd82d1c498d67cde6e7a249fb520N.exe
Size

112KB
Sample

240824-yn49ksybpm
MD5

f51ddd82d1c498d67cde6e7a249fb520
SHA1

c508ed2343f988265937194232a0b63375e2fa01
SHA256

2479ac33ea99465cce5be79338525b329ee17a78715432635e70aa92338a1c16
SHA512

5ba8565b4dfb3c60336bfaa0bef6bd8a728f76ecf60598e10563a180390a8026d1714470ff076ad65295b09960f581d87cdecd7ecd270fbbfd55746f4a4dcb15
SSDEEP

3072:ziIbAXhvYR5vnfibjsHs24yphc+lc802eSQ:ziIbKvI5vnfibjVyphdlc856

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f51ddd82d1c498d67cde6e7a249fb520N.exe
- Size
  
  112KB
- MD5
  
  f51ddd82d1c498d67cde6e7a249fb520
- SHA1
  
  c508ed2343f988265937194232a0b63375e2fa01
- SHA256
  
  2479ac33ea99465cce5be79338525b329ee17a78715432635e70aa92338a1c16
- SHA512
  
  5ba8565b4dfb3c60336bfaa0bef6bd8a728f76ecf60598e10563a180390a8026d1714470ff076ad65295b09960f581d87cdecd7ecd270fbbfd55746f4a4dcb15
- SSDEEP
  
  3072:ziIbAXhvYR5vnfibjsHs24yphc+lc802eSQ:ziIbKvI5vnfibjVyphdlc856
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence