9af0498d16bb0a65e5677b0fb92e85efb1352d76c822f9e22f34b8a9f5240b42 | Triage

Sharing

General

Target

2ed5b5f194e363972461acde8ab371e0N.exe
Size

71KB
Sample

240825-r4r6mazarg
MD5

2ed5b5f194e363972461acde8ab371e0
SHA1

f9f635fa9d3e2667049e1df31d24bd500acb444b
SHA256

9af0498d16bb0a65e5677b0fb92e85efb1352d76c822f9e22f34b8a9f5240b42
SHA512

96fd932223fbd7ffba58e2215a0155f4b9f5278bd58bc7e66c954ebd95006ff0eba0c16fd9770f9f504d3046447ca248d95ce9d5028b30a4dba1b9b05be98e28
SSDEEP

1536:kbv4+Z407e3LU8uHB2gr5rRQY2gt7ozRQdK1P+ATT:4/F7e3LU8uHzdqY2esekP+A3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2ed5b5f194e363972461acde8ab371e0N.exe
- Size
  
  71KB
- MD5
  
  2ed5b5f194e363972461acde8ab371e0
- SHA1
  
  f9f635fa9d3e2667049e1df31d24bd500acb444b
- SHA256
  
  9af0498d16bb0a65e5677b0fb92e85efb1352d76c822f9e22f34b8a9f5240b42
- SHA512
  
  96fd932223fbd7ffba58e2215a0155f4b9f5278bd58bc7e66c954ebd95006ff0eba0c16fd9770f9f504d3046447ca248d95ce9d5028b30a4dba1b9b05be98e28
- SSDEEP
  
  1536:kbv4+Z407e3LU8uHB2gr5rRQY2gt7ozRQdK1P+ATT:4/F7e3LU8uHzdqY2esekP+A3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence