ce056f9c8977c7626b814b5e11b25f83877b1b6794ea35f108dfe29e4ed4e71c | Triage

Sharing

General

Target

fe640a7e707532d965f22c2f0a3caef0N.exe
Size

56KB
Sample

240825-cw5z7atgrl
MD5

fe640a7e707532d965f22c2f0a3caef0
SHA1

f1cb2c74a180e193497e5bd1a432cfe748f37aaa
SHA256

ce056f9c8977c7626b814b5e11b25f83877b1b6794ea35f108dfe29e4ed4e71c
SHA512

894dcab6f4d7c8bc57c80dcda2444cf854be01d933010cf9063c1843c0a96b361c08729fc0c940441d9aec7dabc6eda962d66557ff8254d4cbc888483d9f9477
SSDEEP

1536:+vU65foPjjzZEsXuVkww5dmc8goNWM0u89G4:CU65wPjJHgT4rhoau8o4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fe640a7e707532d965f22c2f0a3caef0N.exe
- Size
  
  56KB
- MD5
  
  fe640a7e707532d965f22c2f0a3caef0
- SHA1
  
  f1cb2c74a180e193497e5bd1a432cfe748f37aaa
- SHA256
  
  ce056f9c8977c7626b814b5e11b25f83877b1b6794ea35f108dfe29e4ed4e71c
- SHA512
  
  894dcab6f4d7c8bc57c80dcda2444cf854be01d933010cf9063c1843c0a96b361c08729fc0c940441d9aec7dabc6eda962d66557ff8254d4cbc888483d9f9477
- SSDEEP
  
  1536:+vU65foPjjzZEsXuVkww5dmc8goNWM0u89G4:CU65wPjJHgT4rhoau8o4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence