8fe3397144572db55bb1f28a14880c142805d7fe094e1e697cb9f463a64098c9 | Triage

Sharing

General

Target

a8c8d98c2767c753509b05c1f0c39440N
Size

352KB
Sample

240826-bnkhvaybpq
MD5

a8c8d98c2767c753509b05c1f0c39440
SHA1

f4a5c687fd04607cba18765b1afb446103ce2e8f
SHA256

8fe3397144572db55bb1f28a14880c142805d7fe094e1e697cb9f463a64098c9
SHA512

6a0fba04a400368ea591e885a8633f2a061fb21de14e3847af7a99468c00e5cb08282b7a103752c0094ea304b4c19231d29c57207551a06036a43ba6285af7ab
SSDEEP

6144:qm8j3xuygNZWpr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFfX:qxjhuyCirCZYE6YYBHpd0uD319ZvSntr

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a8c8d98c2767c753509b05c1f0c39440N
- Size
  
  352KB
- MD5
  
  a8c8d98c2767c753509b05c1f0c39440
- SHA1
  
  f4a5c687fd04607cba18765b1afb446103ce2e8f
- SHA256
  
  8fe3397144572db55bb1f28a14880c142805d7fe094e1e697cb9f463a64098c9
- SHA512
  
  6a0fba04a400368ea591e885a8633f2a061fb21de14e3847af7a99468c00e5cb08282b7a103752c0094ea304b4c19231d29c57207551a06036a43ba6285af7ab
- SSDEEP
  
  6144:qm8j3xuygNZWpr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFfX:qxjhuyCirCZYE6YYBHpd0uD319ZvSntr
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence