ea3972c51dc72a8033772a7cf3edf6863a642ade6e9c8d15194b58c4ea43a5f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d135273ce4f2db77959d1358b8d2c200N.exe
Size

71KB
Sample

240901-dk4hnazdkr
MD5

d135273ce4f2db77959d1358b8d2c200
SHA1

ac2d87c08f7652a4b112ddcbf3a14f22236176c5
SHA256

ea3972c51dc72a8033772a7cf3edf6863a642ade6e9c8d15194b58c4ea43a5f3
SHA512

d3536d5e2b304bdbae2e9385baa4d19b204ba9901a2a2e60bfb355198bb53dd59de3f87a76f16934e5b0fe1c3af048b67b522fbbc445fe664b822e36684e79a9
SSDEEP

1536:6fb867meOk1AizFkv3bCS2vOT+a7r2L67RZObZUS:686jOk1As04jn6ClUS

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d135273ce4f2db77959d1358b8d2c200N.exe
- Size
  
  71KB
- MD5
  
  d135273ce4f2db77959d1358b8d2c200
- SHA1
  
  ac2d87c08f7652a4b112ddcbf3a14f22236176c5
- SHA256
  
  ea3972c51dc72a8033772a7cf3edf6863a642ade6e9c8d15194b58c4ea43a5f3
- SHA512
  
  d3536d5e2b304bdbae2e9385baa4d19b204ba9901a2a2e60bfb355198bb53dd59de3f87a76f16934e5b0fe1c3af048b67b522fbbc445fe664b822e36684e79a9
- SSDEEP
  
  1536:6fb867meOk1AizFkv3bCS2vOT+a7r2L67RZObZUS:686jOk1As04jn6ClUS
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence