8fabf0aaed1abc2269429c87894f94c0e573ac7caf0e28af06324cab60401cd2 | Triage

Sharing

General

Target

df774be8d8d6fa1b6d092d862e7bdff0N.exe
Size

51KB
Sample

240825-j28ftswark
MD5

df774be8d8d6fa1b6d092d862e7bdff0
SHA1

30a42b4a9bd531fdde1e98709c6b8d30981a04b2
SHA256

8fabf0aaed1abc2269429c87894f94c0e573ac7caf0e28af06324cab60401cd2
SHA512

cd3bd1431f5c462c0a326e3a94f791d4c9691d9c72b865cbf409f8c88318fe4af8e42872bd9b0c7ccdce40c248bf0538f869be117079187cff6b5bd58b7917b4
SSDEEP

1536:Vo0AFslYDWIVCsAIyPr57tSTPzs7qcNhHcu4F1NazB:TAm+WIVCsAIyPr57tSTPzAhHTH

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  df774be8d8d6fa1b6d092d862e7bdff0N.exe
- Size
  
  51KB
- MD5
  
  df774be8d8d6fa1b6d092d862e7bdff0
- SHA1
  
  30a42b4a9bd531fdde1e98709c6b8d30981a04b2
- SHA256
  
  8fabf0aaed1abc2269429c87894f94c0e573ac7caf0e28af06324cab60401cd2
- SHA512
  
  cd3bd1431f5c462c0a326e3a94f791d4c9691d9c72b865cbf409f8c88318fe4af8e42872bd9b0c7ccdce40c248bf0538f869be117079187cff6b5bd58b7917b4
- SSDEEP
  
  1536:Vo0AFslYDWIVCsAIyPr57tSTPzs7qcNhHcu4F1NazB:TAm+WIVCsAIyPr57tSTPzAhHTH
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence