c80caf2a6ed58cbaeba6082f1f220aa7eceea4e8a724e9a44f951bb9640221ab | Triage

Sharing

General

Target

0f81f4328afa2cd66a6ab172d6bd3200N.exe
Size

5.0MB
Sample

240901-a5t8yavfjq
MD5

0f81f4328afa2cd66a6ab172d6bd3200
SHA1

873f90b8c0adb15668d061ea4c8683b6fb7a7488
SHA256

c80caf2a6ed58cbaeba6082f1f220aa7eceea4e8a724e9a44f951bb9640221ab
SHA512

805796a0533fe577d18642e3105acb7d42b107937420145fceea0f6106c3316f5e69eeb4d4291f8cc0eb1f5520ee1bd2408abd7b5bd7ec0a1537bda13df4c382
SSDEEP

98304:8oxyxCxIxixIxDxIxixIx8xIxixIxDxIxixIxABxIxixIxDxIxixIxyxCxIxixIH:

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0f81f4328afa2cd66a6ab172d6bd3200N.exe
- Size
  
  5.0MB
- MD5
  
  0f81f4328afa2cd66a6ab172d6bd3200
- SHA1
  
  873f90b8c0adb15668d061ea4c8683b6fb7a7488
- SHA256
  
  c80caf2a6ed58cbaeba6082f1f220aa7eceea4e8a724e9a44f951bb9640221ab
- SHA512
  
  805796a0533fe577d18642e3105acb7d42b107937420145fceea0f6106c3316f5e69eeb4d4291f8cc0eb1f5520ee1bd2408abd7b5bd7ec0a1537bda13df4c382
- SSDEEP
  
  98304:8oxyxCxIxixIxDxIxixIx8xIxixIxDxIxixIxABxIxixIxDxIxixIxyxCxIxixIH:
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence