cf908becf40edae69e8d604918e1c4f15440f35ae220888e1084becd63b13c37 | Triage

Sharing

General

Target

acd35c07471fcc4c553a2a708eeb5de0N.exe
Size

361KB
Sample

240901-2qk59svdja
MD5

acd35c07471fcc4c553a2a708eeb5de0
SHA1

69c5358a51814744d37d2fa2621c8cef8729e7b7
SHA256

cf908becf40edae69e8d604918e1c4f15440f35ae220888e1084becd63b13c37
SHA512

40276d0185c980eaae85a6e5d1ac0a8d160d9dc7d137e29ebe1688a12d75f69fc787c3818c04b79242d83889a58c1c996188520e0507f85175bf0260842386dc
SSDEEP

6144:jpI4sVQ///NR5fLvQ///NREQ///NR5fLYG3eujPQ///NR5f:ew/Nq/NZ/NcZ7/N

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  acd35c07471fcc4c553a2a708eeb5de0N.exe
- Size
  
  361KB
- MD5
  
  acd35c07471fcc4c553a2a708eeb5de0
- SHA1
  
  69c5358a51814744d37d2fa2621c8cef8729e7b7
- SHA256
  
  cf908becf40edae69e8d604918e1c4f15440f35ae220888e1084becd63b13c37
- SHA512
  
  40276d0185c980eaae85a6e5d1ac0a8d160d9dc7d137e29ebe1688a12d75f69fc787c3818c04b79242d83889a58c1c996188520e0507f85175bf0260842386dc
- SSDEEP
  
  6144:jpI4sVQ///NR5fLvQ///NREQ///NR5fLYG3eujPQ///NR5f:ew/Nq/NZ/NcZ7/N
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence