62747bfbe5b45abd5a8895bc339c0752189c1cad8ae2a89a71554dbfaee49c24 | Triage

Sharing

General

Target

2efc7d021aad3a70f0910a53a8960ad0N.exe
Size

128KB
Sample

240828-zm1ensxcrn
MD5

2efc7d021aad3a70f0910a53a8960ad0
SHA1

881bf4ef9620bac9ba2a54d8694e56cbd91d8573
SHA256

62747bfbe5b45abd5a8895bc339c0752189c1cad8ae2a89a71554dbfaee49c24
SHA512

b6e3a36446a7ed1b34835a598e62288f7d179a348eb550c22bc4e8e07602fbe1e6bc92f61415adb5f3eefd1dbeebc2642441fac20a13b6f2f06dcf4fe67320af
SSDEEP

3072:DkmyaELrj4wQ3RVkgbmAtK7ClWEn3bwf1nFzwSAJB8g:DkHgwQjbptNWEnE1n6xJmg

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2efc7d021aad3a70f0910a53a8960ad0N.exe
- Size
  
  128KB
- MD5
  
  2efc7d021aad3a70f0910a53a8960ad0
- SHA1
  
  881bf4ef9620bac9ba2a54d8694e56cbd91d8573
- SHA256
  
  62747bfbe5b45abd5a8895bc339c0752189c1cad8ae2a89a71554dbfaee49c24
- SHA512
  
  b6e3a36446a7ed1b34835a598e62288f7d179a348eb550c22bc4e8e07602fbe1e6bc92f61415adb5f3eefd1dbeebc2642441fac20a13b6f2f06dcf4fe67320af
- SSDEEP
  
  3072:DkmyaELrj4wQ3RVkgbmAtK7ClWEn3bwf1nFzwSAJB8g:DkHgwQjbptNWEnE1n6xJmg
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence