9a3a9c50ae2409c56e965ab19966c2a7fe6084c2bbea2911e6dc7acf3ba8d7df | Triage

Sharing

General

Target

4c1b87a67cb967f959fc0af9691fc7b0N.exe
Size

55KB
Sample

240825-j9e49avaja
MD5

4c1b87a67cb967f959fc0af9691fc7b0
SHA1

e05c5e7099b5e7c9dcdc5d22fa84d27027ce559b
SHA256

9a3a9c50ae2409c56e965ab19966c2a7fe6084c2bbea2911e6dc7acf3ba8d7df
SHA512

ab6fd4bbf0e853d3b19a9098ee3c9e116cfbc7d940dadd2e1ff0b714d6454786c533177e0361b0fa2efc54c91c6b8e070bf5227bfdb9d51cccd4b21f5218647e
SSDEEP

1536:N8LEYoGp6ty6NqjDqS/NSoNSd0A3shxD6:N8LExrN4qCNXNW0A8hh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  4c1b87a67cb967f959fc0af9691fc7b0N.exe
- Size
  
  55KB
- MD5
  
  4c1b87a67cb967f959fc0af9691fc7b0
- SHA1
  
  e05c5e7099b5e7c9dcdc5d22fa84d27027ce559b
- SHA256
  
  9a3a9c50ae2409c56e965ab19966c2a7fe6084c2bbea2911e6dc7acf3ba8d7df
- SHA512
  
  ab6fd4bbf0e853d3b19a9098ee3c9e116cfbc7d940dadd2e1ff0b714d6454786c533177e0361b0fa2efc54c91c6b8e070bf5227bfdb9d51cccd4b21f5218647e
- SSDEEP
  
  1536:N8LEYoGp6ty6NqjDqS/NSoNSd0A3shxD6:N8LExrN4qCNXNW0A8hh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence