f2d45a1177c393208fec782bed099c26526cfd9b1b57a0ae5297c9057db98ef1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d0c085661840409eb5d0bb3f9eb97b0N.exe
Size

285KB
Sample

240829-papsaszhpe
MD5

3d0c085661840409eb5d0bb3f9eb97b0
SHA1

7b74c0c828eec323e685ef9772a0bc1156a17664
SHA256

f2d45a1177c393208fec782bed099c26526cfd9b1b57a0ae5297c9057db98ef1
SHA512

509ae35c30181a4ea760612152076f4ecaf3da242697a8affb6b6a920c1707106d5130f2af6f64cae2b77f9d0fe45776a4c6f13fb0d2691707b10f25f7e4fa81
SSDEEP

3072:p0SfJ8rYumMxVAVzeJVCae+KVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:pPlumMx0I2+KQIoi7tWa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3d0c085661840409eb5d0bb3f9eb97b0N.exe
- Size
  
  285KB
- MD5
  
  3d0c085661840409eb5d0bb3f9eb97b0
- SHA1
  
  7b74c0c828eec323e685ef9772a0bc1156a17664
- SHA256
  
  f2d45a1177c393208fec782bed099c26526cfd9b1b57a0ae5297c9057db98ef1
- SHA512
  
  509ae35c30181a4ea760612152076f4ecaf3da242697a8affb6b6a920c1707106d5130f2af6f64cae2b77f9d0fe45776a4c6f13fb0d2691707b10f25f7e4fa81
- SSDEEP
  
  3072:p0SfJ8rYumMxVAVzeJVCae+KVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:pPlumMx0I2+KQIoi7tWa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence