b995cbf8930844b74497c086b7add09a3d6e3a2847aeb44d640e5cbd17f74bc3 | Triage

Sharing

General

Target

17ebcfa39aa440aa1829cee21f3940f0N.exe
Size

59KB
Sample

240825-qm8llsxhnj
MD5

17ebcfa39aa440aa1829cee21f3940f0
SHA1

42e47e24dd72de5ba844f80f25f15b6d1538d82f
SHA256

b995cbf8930844b74497c086b7add09a3d6e3a2847aeb44d640e5cbd17f74bc3
SHA512

a4ac9ed2649c6f1919dde6cf7ab018e4dcc21c62ba67dbd42a32211c21b2d4dd436879b3b3fd07638b142fc218ed13251b09d0e809f36ed0403ee7bfb91599a2
SSDEEP

1536:BcAuY2UqbWDqbRlQ2zS0bhp3ahIGFNCyVs:BtuY2pbWD8zLaZees

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  17ebcfa39aa440aa1829cee21f3940f0N.exe
- Size
  
  59KB
- MD5
  
  17ebcfa39aa440aa1829cee21f3940f0
- SHA1
  
  42e47e24dd72de5ba844f80f25f15b6d1538d82f
- SHA256
  
  b995cbf8930844b74497c086b7add09a3d6e3a2847aeb44d640e5cbd17f74bc3
- SHA512
  
  a4ac9ed2649c6f1919dde6cf7ab018e4dcc21c62ba67dbd42a32211c21b2d4dd436879b3b3fd07638b142fc218ed13251b09d0e809f36ed0403ee7bfb91599a2
- SSDEEP
  
  1536:BcAuY2UqbWDqbRlQ2zS0bhp3ahIGFNCyVs:BtuY2pbWD8zLaZees
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence