d22dfa8e73aecfe598a797bca09ab7be816e8783155c241acb73c158ab2e46f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebb07d55cd8f87c63b9d371caf8c8d50N.exe
Size

55KB
Sample

240829-n6tkpasdkn
MD5

ebb07d55cd8f87c63b9d371caf8c8d50
SHA1

89c1c723c4afa50ecd4bcb6a2f948509b9a2c7f9
SHA256

d22dfa8e73aecfe598a797bca09ab7be816e8783155c241acb73c158ab2e46f8
SHA512

b769e80a1544924f6639ab64e8fd27cd23c98c34b1285bd239b4760915c6974ebf9d84d50a2740610d1e248ab400ccfe3177bdeda54afeb58692bd64712453f7
SSDEEP

1536:WA4fGrtL32TNm4RWGOTxm2tWnuoINSoNSd0A3shxD6:x4+5S7yNmcWnvINXNW0A8hh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ebb07d55cd8f87c63b9d371caf8c8d50N.exe
- Size
  
  55KB
- MD5
  
  ebb07d55cd8f87c63b9d371caf8c8d50
- SHA1
  
  89c1c723c4afa50ecd4bcb6a2f948509b9a2c7f9
- SHA256
  
  d22dfa8e73aecfe598a797bca09ab7be816e8783155c241acb73c158ab2e46f8
- SHA512
  
  b769e80a1544924f6639ab64e8fd27cd23c98c34b1285bd239b4760915c6974ebf9d84d50a2740610d1e248ab400ccfe3177bdeda54afeb58692bd64712453f7
- SSDEEP
  
  1536:WA4fGrtL32TNm4RWGOTxm2tWnuoINSoNSd0A3shxD6:x4+5S7yNmcWnvINXNW0A8hh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence