d833a6440d0064ebe705a21e45e0fc7a837f1216d6ff71f80050e36171d615fe | Triage

Sharing

General

Target

716225e46e69afb36600682de616f460N.exe
Size

98KB
Sample

240826-gbslksxgkh
MD5

716225e46e69afb36600682de616f460
SHA1

dd0c8d0e69f414f2d6ce59033131e9b88eae63dc
SHA256

d833a6440d0064ebe705a21e45e0fc7a837f1216d6ff71f80050e36171d615fe
SHA512

f3f308f0c21fdbeb9a5b510a5a11ff49771023f5efbe5680aa206a06121a6df2f790127854f794a5adefc7efc56283b62f2a626123d5a9408bd44db61b72a706
SSDEEP

3072:GWNU8pVUQMeNAlQAHV1d1p1d1d1B1B1B1iuLETeFKPD375lHzpa1P:R7pnMeNAOA11d1p1d1d1B1B1B1iKETeZ

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  716225e46e69afb36600682de616f460N.exe
- Size
  
  98KB
- MD5
  
  716225e46e69afb36600682de616f460
- SHA1
  
  dd0c8d0e69f414f2d6ce59033131e9b88eae63dc
- SHA256
  
  d833a6440d0064ebe705a21e45e0fc7a837f1216d6ff71f80050e36171d615fe
- SHA512
  
  f3f308f0c21fdbeb9a5b510a5a11ff49771023f5efbe5680aa206a06121a6df2f790127854f794a5adefc7efc56283b62f2a626123d5a9408bd44db61b72a706
- SSDEEP
  
  3072:GWNU8pVUQMeNAlQAHV1d1p1d1d1B1B1B1iuLETeFKPD375lHzpa1P:R7pnMeNAOA11d1p1d1d1B1B1B1iKETeZ
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence