db5a66cf899c710a74e4c1df182331c01dc09e9b213f9914f889a3025e824724 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d22d076bf7281fd176bf25c7bc1e9c20N.exe
Size

169KB
Sample

240825-ht63cssgqp
MD5

d22d076bf7281fd176bf25c7bc1e9c20
SHA1

d94393752baa353ed1b473a56f9646112116fb53
SHA256

db5a66cf899c710a74e4c1df182331c01dc09e9b213f9914f889a3025e824724
SHA512

e6550cc2d0292be10a9363929ad82ab79282eca7e6f0444bff926248993393e516828df2c3a14a43cc7b365bfc69d810adbd4ccf3a0d42b211da8e96f46775a8
SSDEEP

3072:MSC3QXmhuGxSVgVmPxMeEvPOdgujv6NLPfFFrKP92f65Ha:MSZmqgYJML3OdgawrFZKPf9

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d22d076bf7281fd176bf25c7bc1e9c20N.exe
- Size
  
  169KB
- MD5
  
  d22d076bf7281fd176bf25c7bc1e9c20
- SHA1
  
  d94393752baa353ed1b473a56f9646112116fb53
- SHA256
  
  db5a66cf899c710a74e4c1df182331c01dc09e9b213f9914f889a3025e824724
- SHA512
  
  e6550cc2d0292be10a9363929ad82ab79282eca7e6f0444bff926248993393e516828df2c3a14a43cc7b365bfc69d810adbd4ccf3a0d42b211da8e96f46775a8
- SSDEEP
  
  3072:MSC3QXmhuGxSVgVmPxMeEvPOdgujv6NLPfFFrKP92f65Ha:MSZmqgYJML3OdgawrFZKPf9
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence