895cd0faa087f04905d7f17d1e0f68928827a7ab9a3301b48a0de48c797594c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a936ab1d1a2b7c49cbf71469600535d0N.exe
Size

96KB
Sample

240901-bykxcsxene
MD5

a936ab1d1a2b7c49cbf71469600535d0
SHA1

dc6b4b7449a32a39d699ff6b1f9a696ff31a1df7
SHA256

895cd0faa087f04905d7f17d1e0f68928827a7ab9a3301b48a0de48c797594c6
SHA512

3916c8d04a8015ed34806aaf2909c582240e25c38ed598b276839fc9461146ceca81b870415d9f19d237fee815f71716dd2c80107089ffaee948ae1c8d66b6e9
SSDEEP

1536:4mdlkkb64mpqe0vhRrV7m1v6TGbZrduV9jojTIvjrH:DOk+Bqe0vhRBfAZrd69jc0vf

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a936ab1d1a2b7c49cbf71469600535d0N.exe
- Size
  
  96KB
- MD5
  
  a936ab1d1a2b7c49cbf71469600535d0
- SHA1
  
  dc6b4b7449a32a39d699ff6b1f9a696ff31a1df7
- SHA256
  
  895cd0faa087f04905d7f17d1e0f68928827a7ab9a3301b48a0de48c797594c6
- SHA512
  
  3916c8d04a8015ed34806aaf2909c582240e25c38ed598b276839fc9461146ceca81b870415d9f19d237fee815f71716dd2c80107089ffaee948ae1c8d66b6e9
- SSDEEP
  
  1536:4mdlkkb64mpqe0vhRrV7m1v6TGbZrduV9jojTIvjrH:DOk+Bqe0vhRBfAZrd69jc0vf
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence