e360f0c587926682627788e9c069d89d8c4595c8a46a3dbc10791787f820e078 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9afcecc81543afa85e0ed9d7550e8c30N.exe
Size

80KB
Sample

240825-k8rbkayblj
MD5

9afcecc81543afa85e0ed9d7550e8c30
SHA1

cac6eda657dbf61b9dad241a06422c937bd0e1b8
SHA256

e360f0c587926682627788e9c069d89d8c4595c8a46a3dbc10791787f820e078
SHA512

d9f594abf2ca27a02251a16d0e760988e51dbe1ca9f9dc33c93809478a12b55d026e49213bbb33da6077370af7f77a91b5d54661c5a507bb86dd2cf6671052c1
SSDEEP

1536:4mJWez5/fnzGA2l6oMPcxLSZ2LfWS5DUHRbPa9b6i+sIk:VBLGJYoJWSeS5DSCopsIk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9afcecc81543afa85e0ed9d7550e8c30N.exe
- Size
  
  80KB
- MD5
  
  9afcecc81543afa85e0ed9d7550e8c30
- SHA1
  
  cac6eda657dbf61b9dad241a06422c937bd0e1b8
- SHA256
  
  e360f0c587926682627788e9c069d89d8c4595c8a46a3dbc10791787f820e078
- SHA512
  
  d9f594abf2ca27a02251a16d0e760988e51dbe1ca9f9dc33c93809478a12b55d026e49213bbb33da6077370af7f77a91b5d54661c5a507bb86dd2cf6671052c1
- SSDEEP
  
  1536:4mJWez5/fnzGA2l6oMPcxLSZ2LfWS5DUHRbPa9b6i+sIk:VBLGJYoJWSeS5DSCopsIk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence