68e4944c03a2e5b9fc86d9875c979e4e1feb29618125374d452a0f79e4bb2af1 | Triage

Sharing

General

Target

fdb6864d8ebc3af7a0a01a1b57cd5600N.exe
Size

128KB
Sample

240825-nrzs6asdld
MD5

fdb6864d8ebc3af7a0a01a1b57cd5600
SHA1

3613a6bed856c3fa21900e26660836d0472779e0
SHA256

68e4944c03a2e5b9fc86d9875c979e4e1feb29618125374d452a0f79e4bb2af1
SHA512

5324e87d0656033a165681e7b39525f7707a8611ae8eca8e26fe58b6405f199e0b3d410c36e23a0d3e267be53d162d61a15c8f93ce8d50159a546131e3ad1168
SSDEEP

3072:F7INm0fddGbrZFsMPGeqSJdEN0s4WE+3S9pui6yYPaI7DX:F7IA0fd0uMPdPENm+3Mpui6yYPaI/

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fdb6864d8ebc3af7a0a01a1b57cd5600N.exe
- Size
  
  128KB
- MD5
  
  fdb6864d8ebc3af7a0a01a1b57cd5600
- SHA1
  
  3613a6bed856c3fa21900e26660836d0472779e0
- SHA256
  
  68e4944c03a2e5b9fc86d9875c979e4e1feb29618125374d452a0f79e4bb2af1
- SHA512
  
  5324e87d0656033a165681e7b39525f7707a8611ae8eca8e26fe58b6405f199e0b3d410c36e23a0d3e267be53d162d61a15c8f93ce8d50159a546131e3ad1168
- SSDEEP
  
  3072:F7INm0fddGbrZFsMPGeqSJdEN0s4WE+3S9pui6yYPaI7DX:F7IA0fd0uMPdPENm+3Mpui6yYPaI/
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence