d1210147dbb868f8c36b61398d4acd11a68de2e44ba5a43bcb771db2ace18e3c | Triage

Sharing

General

Target

a002570b8a79e74c0cbe9532395a62e0N.exe
Size

9.6MB
Sample

240829-h99hessalp
MD5

a002570b8a79e74c0cbe9532395a62e0
SHA1

ce7982587be07b05d94ebeb911fcaead387933bc
SHA256

d1210147dbb868f8c36b61398d4acd11a68de2e44ba5a43bcb771db2ace18e3c
SHA512

a34b3c1dbcd8f681e1d505302cb744a0fd03fd46cb5ac6f3f8cfb6bea1296d6ec72dcabbfb832ad08ad4475616f38a162240f14ab81016226d8addb8c18411ef
SSDEEP

196608:45qnhgJuP3LAhCiVXOWvs6A1oMuWr45hrr2l:1S+LJBeJWGhrr2l

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a002570b8a79e74c0cbe9532395a62e0N.exe
- Size
  
  9.6MB
- MD5
  
  a002570b8a79e74c0cbe9532395a62e0
- SHA1
  
  ce7982587be07b05d94ebeb911fcaead387933bc
- SHA256
  
  d1210147dbb868f8c36b61398d4acd11a68de2e44ba5a43bcb771db2ace18e3c
- SHA512
  
  a34b3c1dbcd8f681e1d505302cb744a0fd03fd46cb5ac6f3f8cfb6bea1296d6ec72dcabbfb832ad08ad4475616f38a162240f14ab81016226d8addb8c18411ef
- SSDEEP
  
  196608:45qnhgJuP3LAhCiVXOWvs6A1oMuWr45hrr2l:1S+LJBeJWGhrr2l
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence