b5b30715a161dabeb20ff55cf3e3134ded59e009a1596491469fba2eb61f19e4 | Triage

Sharing

General

Target

57ef1c40391295e31291ef8f543266a0N.exe
Size

71KB
Sample

240826-cpsraa1cqq
MD5

57ef1c40391295e31291ef8f543266a0
SHA1

1f7ed8f0368592685268649dd4afd2f0a0011957
SHA256

b5b30715a161dabeb20ff55cf3e3134ded59e009a1596491469fba2eb61f19e4
SHA512

f7d542f0325a5ba5b6e907ebb33ddd14ab1c13128eb179efc3653e113144c62080769f6ca99cc179feee6a631581c2a3ebe89e2df630ccb1513952a6e506242e
SSDEEP

1536:AYdo8Ek9G7nL0eo5QblzvTlgNRRQ2DbEyRCRRRoR4Rk:bd9FYkeo0zLlqReIEy032ya

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  57ef1c40391295e31291ef8f543266a0N.exe
- Size
  
  71KB
- MD5
  
  57ef1c40391295e31291ef8f543266a0
- SHA1
  
  1f7ed8f0368592685268649dd4afd2f0a0011957
- SHA256
  
  b5b30715a161dabeb20ff55cf3e3134ded59e009a1596491469fba2eb61f19e4
- SHA512
  
  f7d542f0325a5ba5b6e907ebb33ddd14ab1c13128eb179efc3653e113144c62080769f6ca99cc179feee6a631581c2a3ebe89e2df630ccb1513952a6e506242e
- SSDEEP
  
  1536:AYdo8Ek9G7nL0eo5QblzvTlgNRRQ2DbEyRCRRRoR4Rk:bd9FYkeo0zLlqReIEy032ya
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence