8a935e612c3a0b3b3832f03453b02eaa0e9a79dcbd7cb59784b2fe1ff0a32053 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b4b12d8c8af93e4e9367f71031a59d0N.exe
Size

315KB
Sample

240829-jezv6ssclj
MD5

0b4b12d8c8af93e4e9367f71031a59d0
SHA1

1c488099805ce3a798bc92c4e6ff11fbcb30f5c4
SHA256

8a935e612c3a0b3b3832f03453b02eaa0e9a79dcbd7cb59784b2fe1ff0a32053
SHA512

10ac81bedcb7df800889f1bc83e7e253c51895c4013fd27f5164cf3fec865961fb5891f68422da68f77e4992dcdbf32562a906152966773596fab14730dc7dd3
SSDEEP

3072:r6yzomUWzTtSRTtq749+f4auvZ7LC4ZR4mqmnKBstqBiPXPAPePdfVQ:rbzomTSTtqI+stesMmG

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0b4b12d8c8af93e4e9367f71031a59d0N.exe
- Size
  
  315KB
- MD5
  
  0b4b12d8c8af93e4e9367f71031a59d0
- SHA1
  
  1c488099805ce3a798bc92c4e6ff11fbcb30f5c4
- SHA256
  
  8a935e612c3a0b3b3832f03453b02eaa0e9a79dcbd7cb59784b2fe1ff0a32053
- SHA512
  
  10ac81bedcb7df800889f1bc83e7e253c51895c4013fd27f5164cf3fec865961fb5891f68422da68f77e4992dcdbf32562a906152966773596fab14730dc7dd3
- SSDEEP
  
  3072:r6yzomUWzTtSRTtq749+f4auvZ7LC4ZR4mqmnKBstqBiPXPAPePdfVQ:rbzomTSTtqI+stesMmG
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence