8d316cf0a313eac1546c3f65606118a0ca9981caf490f48c70d1e6f731d75bb6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f2351066b9bcc3328392a2fdb8d6300N.exe
Size

80KB
Sample

240825-glj27azckp
MD5

8f2351066b9bcc3328392a2fdb8d6300
SHA1

2f420e06807e6127ce57a42f03150707775eef40
SHA256

8d316cf0a313eac1546c3f65606118a0ca9981caf490f48c70d1e6f731d75bb6
SHA512

623300b0e08a0292f2ff5bd4f9a87f126858d3b5411a51500a5e56be8b16ca693f44bd5949e093135d61fda4d03071324a965d30d09f7a20ea28b3bb6cb98695
SSDEEP

1536:EtQPhHhdB89X9+00W5dpE7Fmxs/R0LpMCENBn2LFJ9VqDlzVxyh+CbxMa:EtQ5HhdePUW5dpE7Qs/R0LpMCENBMFJP

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8f2351066b9bcc3328392a2fdb8d6300N.exe
- Size
  
  80KB
- MD5
  
  8f2351066b9bcc3328392a2fdb8d6300
- SHA1
  
  2f420e06807e6127ce57a42f03150707775eef40
- SHA256
  
  8d316cf0a313eac1546c3f65606118a0ca9981caf490f48c70d1e6f731d75bb6
- SHA512
  
  623300b0e08a0292f2ff5bd4f9a87f126858d3b5411a51500a5e56be8b16ca693f44bd5949e093135d61fda4d03071324a965d30d09f7a20ea28b3bb6cb98695
- SSDEEP
  
  1536:EtQPhHhdB89X9+00W5dpE7Fmxs/R0LpMCENBn2LFJ9VqDlzVxyh+CbxMa:EtQ5HhdePUW5dpE7Qs/R0LpMCENBMFJP
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence