d4d4f9a72ec84a3fadeddcd5f226d4c2fbb6044de2509eac3272bbe1d963c33f | Triage

Sharing

General

Target

d1bd4770df5520c86a882c3d2ebd28e0N.exe
Size

428KB
Sample

240829-ny9xpszdlf
MD5

d1bd4770df5520c86a882c3d2ebd28e0
SHA1

718b40641082bf8b8b7aedfc6a2db546c514998e
SHA256

d4d4f9a72ec84a3fadeddcd5f226d4c2fbb6044de2509eac3272bbe1d963c33f
SHA512

ebaacd51d1e4f769615dbc03933199a1cd20555f30fd2351f684e1e43b1686c0da93e63f350c81957c1cbc54af5dde69bf699b28e381071e0449437dcd151e3c
SSDEEP

3072:wpv6rHtQ3Z8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho/:rrHtQ35ba4sFj5tPNki9HZd1sFj5tw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d1bd4770df5520c86a882c3d2ebd28e0N.exe
- Size
  
  428KB
- MD5
  
  d1bd4770df5520c86a882c3d2ebd28e0
- SHA1
  
  718b40641082bf8b8b7aedfc6a2db546c514998e
- SHA256
  
  d4d4f9a72ec84a3fadeddcd5f226d4c2fbb6044de2509eac3272bbe1d963c33f
- SHA512
  
  ebaacd51d1e4f769615dbc03933199a1cd20555f30fd2351f684e1e43b1686c0da93e63f350c81957c1cbc54af5dde69bf699b28e381071e0449437dcd151e3c
- SSDEEP
  
  3072:wpv6rHtQ3Z8mnaoPav8Wz24ho1mtye3lFDrFDHZtO8jJkiUi8ChpBhx5Zd424ho/:rrHtQ35ba4sFj5tPNki9HZd1sFj5tw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence