21f965ffca824cd209b411c5365dd5bcf03a29d23b9db0132f09045c08474db3 | Triage

Sharing

General

Target

87d3c4716201c40f0256bc9dcbfc79d0N.exe
Size

78KB
Sample

240825-hk6p8ssbql
MD5

87d3c4716201c40f0256bc9dcbfc79d0
SHA1

ab63951038dc002cb2c36480354b2ab049a4d863
SHA256

21f965ffca824cd209b411c5365dd5bcf03a29d23b9db0132f09045c08474db3
SHA512

a48de41bd4db5897ed2ddd256c611cbed60780d86e81e9fa47bfb4d96d9fbf8c988097ca00f6ce8f1e4be25e1cef74d682d51a9bd40ad9f3dd56696bc63061a8
SSDEEP

1536:l8SDcK0h2NBqrx5CywnX9Q2Zkd8T8fwLaiiVkN+zL20gJi1ie:l8I7S2AxsFNQ2Od8TywLaiiVkgzL20Ww

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  87d3c4716201c40f0256bc9dcbfc79d0N.exe
- Size
  
  78KB
- MD5
  
  87d3c4716201c40f0256bc9dcbfc79d0
- SHA1
  
  ab63951038dc002cb2c36480354b2ab049a4d863
- SHA256
  
  21f965ffca824cd209b411c5365dd5bcf03a29d23b9db0132f09045c08474db3
- SHA512
  
  a48de41bd4db5897ed2ddd256c611cbed60780d86e81e9fa47bfb4d96d9fbf8c988097ca00f6ce8f1e4be25e1cef74d682d51a9bd40ad9f3dd56696bc63061a8
- SSDEEP
  
  1536:l8SDcK0h2NBqrx5CywnX9Q2Zkd8T8fwLaiiVkN+zL20gJi1ie:l8I7S2AxsFNQ2Od8TywLaiiVkgzL20Ww
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence