69bbabb7288ee6c35f4f219ebd2bd9a70c4f603e211e34f6ea94249e5d60d759 | Triage

Sharing

General

Target

ef4ac9f039f791265bb9d262a24d4d90N.exe
Size

96KB
Sample

240825-wnzb8awhqg
MD5

ef4ac9f039f791265bb9d262a24d4d90
SHA1

b157fc8b4fcc3a6f9d4a33facfbb7c365f549c36
SHA256

69bbabb7288ee6c35f4f219ebd2bd9a70c4f603e211e34f6ea94249e5d60d759
SHA512

d65e8e24f860c2333a99e80f1fd75d4f06c2b09a1af31ebf295ffe4d4a3e04589d56ca6fb832c16c06b6aa5fdf9d27d7afba99094f89fca86b8aa1c470084790
SSDEEP

1536:64048ZWtbY/zVpfKClCyg2Lk19PXuhiTMuZXGTIVefVDkryyAyqX:4W85BJRa9PXuhuXGQmVDeCyqX

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ef4ac9f039f791265bb9d262a24d4d90N.exe
- Size
  
  96KB
- MD5
  
  ef4ac9f039f791265bb9d262a24d4d90
- SHA1
  
  b157fc8b4fcc3a6f9d4a33facfbb7c365f549c36
- SHA256
  
  69bbabb7288ee6c35f4f219ebd2bd9a70c4f603e211e34f6ea94249e5d60d759
- SHA512
  
  d65e8e24f860c2333a99e80f1fd75d4f06c2b09a1af31ebf295ffe4d4a3e04589d56ca6fb832c16c06b6aa5fdf9d27d7afba99094f89fca86b8aa1c470084790
- SSDEEP
  
  1536:64048ZWtbY/zVpfKClCyg2Lk19PXuhiTMuZXGTIVefVDkryyAyqX:4W85BJRa9PXuhuXGQmVDeCyqX
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence