8c2d10c8f0f1480ccdfcb7b203b509d0ca82a51ef28f3605c7e7d0bf7626b707 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9a330c2df95acbdea7acdff3ed54410N.exe
Size

479KB
Sample

240901-hxglwavarm
MD5

c9a330c2df95acbdea7acdff3ed54410
SHA1

2289a3ad1c3982316c797c0bf7d87adf5c2a8db8
SHA256

8c2d10c8f0f1480ccdfcb7b203b509d0ca82a51ef28f3605c7e7d0bf7626b707
SHA512

15639b51612e18a84b96e6c016cafad91953d8960446c3847af053507b19c83db63b8ad43973b5cf9ff8168d630ebd2aee8531452320d9856f185907e5e66847
SSDEEP

6144:Ce6qXkDgzXPOwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:CLnwIaJwISfPI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c9a330c2df95acbdea7acdff3ed54410N.exe
- Size
  
  479KB
- MD5
  
  c9a330c2df95acbdea7acdff3ed54410
- SHA1
  
  2289a3ad1c3982316c797c0bf7d87adf5c2a8db8
- SHA256
  
  8c2d10c8f0f1480ccdfcb7b203b509d0ca82a51ef28f3605c7e7d0bf7626b707
- SHA512
  
  15639b51612e18a84b96e6c016cafad91953d8960446c3847af053507b19c83db63b8ad43973b5cf9ff8168d630ebd2aee8531452320d9856f185907e5e66847
- SSDEEP
  
  6144:Ce6qXkDgzXPOwXYrMdlvkGr0f+uPOwXYrMdl2MPnhd8+ZDI:CLnwIaJwISfPI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence