76056c1dfd35dac02e0ade1bccb3c01b9d64e0f6b9ac3501d5ec4799b3bb0de0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

95c314e790ac1f4e59a20a22b05a7110N.exe
Size

97KB
Sample

240829-eetxpsthlp
MD5

95c314e790ac1f4e59a20a22b05a7110
SHA1

89a295fdd2be5c9f1234903b9c173d0bf0193cb4
SHA256

76056c1dfd35dac02e0ade1bccb3c01b9d64e0f6b9ac3501d5ec4799b3bb0de0
SHA512

916821b472f058f7ad725cdf774cab0fe64f89593f13d59ca05f066ab04eea3c47f16995525bae2468c247777837f3e8786e3074985865c6ab05010d8bd674ef
SSDEEP

1536:AHcbS2+zPigvHI3vfLjaGe5M6X03FJDFSIgcokQMYUA8IEws40okQMYlhVJX5tBL:AHUSD7P/iAX0vKmQTUJXeK6

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  95c314e790ac1f4e59a20a22b05a7110N.exe
- Size
  
  97KB
- MD5
  
  95c314e790ac1f4e59a20a22b05a7110
- SHA1
  
  89a295fdd2be5c9f1234903b9c173d0bf0193cb4
- SHA256
  
  76056c1dfd35dac02e0ade1bccb3c01b9d64e0f6b9ac3501d5ec4799b3bb0de0
- SHA512
  
  916821b472f058f7ad725cdf774cab0fe64f89593f13d59ca05f066ab04eea3c47f16995525bae2468c247777837f3e8786e3074985865c6ab05010d8bd674ef
- SSDEEP
  
  1536:AHcbS2+zPigvHI3vfLjaGe5M6X03FJDFSIgcokQMYUA8IEws40okQMYlhVJX5tBL:AHUSD7P/iAX0vKmQTUJXeK6
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence