658ac94e0ff294c4385c18e440f41b301d5bc696f3abc87fa50ad7898dd69140 | Triage

Sharing

General

Target

3d475e01cdf17f7d5d102479103cd640N.exe
Size

79KB
Sample

240829-hm6s1syckg
MD5

3d475e01cdf17f7d5d102479103cd640
SHA1

df48f8aa2366cec717c0331f64cf7e7925f8fc4a
SHA256

658ac94e0ff294c4385c18e440f41b301d5bc696f3abc87fa50ad7898dd69140
SHA512

877e0e1a6e243e4bed13564b629b08cea0062921ce44e79d961ed0634ed47ccca6ef75302d687d680aff722f4b8498921891dced1255b6b2502219fc5e29b06b
SSDEEP

1536:jH4c3cJKmgkaLQZlpW8oVhihD3O46NuJ3+R4UE7+iFkSIgiItKq9v6DK:j+JKmgu0hiZ3O4CH4UESixtBtKq9vV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3d475e01cdf17f7d5d102479103cd640N.exe
- Size
  
  79KB
- MD5
  
  3d475e01cdf17f7d5d102479103cd640
- SHA1
  
  df48f8aa2366cec717c0331f64cf7e7925f8fc4a
- SHA256
  
  658ac94e0ff294c4385c18e440f41b301d5bc696f3abc87fa50ad7898dd69140
- SHA512
  
  877e0e1a6e243e4bed13564b629b08cea0062921ce44e79d961ed0634ed47ccca6ef75302d687d680aff722f4b8498921891dced1255b6b2502219fc5e29b06b
- SSDEEP
  
  1536:jH4c3cJKmgkaLQZlpW8oVhihD3O46NuJ3+R4UE7+iFkSIgiItKq9v6DK:j+JKmgu0hiZ3O4CH4UESixtBtKq9vV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence