32846275e10b157d10c23c0d10a67ecd946a0179e31dd7f214afaad2418ffb9a | Triage

Sharing

General

Target

2cf74d32421b3bcc99c5d2f305ddfb00N.exe
Size

89KB
Sample

240901-1salwasfpk
MD5

2cf74d32421b3bcc99c5d2f305ddfb00
SHA1

9e1e5fa994ec7d93bfee9f1d3f531f6b61ec3af4
SHA256

32846275e10b157d10c23c0d10a67ecd946a0179e31dd7f214afaad2418ffb9a
SHA512

9d5c5ee2190ef433eab89f5b9f6bf228e6a82b9a2754ce1ffcdf2006755cac359027c56e3970d67ee27e39f378af0a2f025a8ee7620939ef60b6e3c8201f2df3
SSDEEP

1536:SHOqW9TYsNntpLSFXCjiQFy/l331LV3L7qcvlExkg8Fk:n39TYs6Xqbol1Z3LGcvlakgwk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2cf74d32421b3bcc99c5d2f305ddfb00N.exe
- Size
  
  89KB
- MD5
  
  2cf74d32421b3bcc99c5d2f305ddfb00
- SHA1
  
  9e1e5fa994ec7d93bfee9f1d3f531f6b61ec3af4
- SHA256
  
  32846275e10b157d10c23c0d10a67ecd946a0179e31dd7f214afaad2418ffb9a
- SHA512
  
  9d5c5ee2190ef433eab89f5b9f6bf228e6a82b9a2754ce1ffcdf2006755cac359027c56e3970d67ee27e39f378af0a2f025a8ee7620939ef60b6e3c8201f2df3
- SSDEEP
  
  1536:SHOqW9TYsNntpLSFXCjiQFy/l331LV3L7qcvlExkg8Fk:n39TYs6Xqbol1Z3LGcvlakgwk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence