389bfee1a5048fb84b056f8796ec7071469cdad0835a832691bfb9e5b41d7190 | Triage

Sharing

General

Target

c514b8e6e0de04fa27c48565cc4639c0N.exe
Size

160KB
Sample

240901-n7tbbazemm
MD5

c514b8e6e0de04fa27c48565cc4639c0
SHA1

0331614ae888dae4296089d815e6126c0d972c50
SHA256

389bfee1a5048fb84b056f8796ec7071469cdad0835a832691bfb9e5b41d7190
SHA512

3f724b0164aee034c5d52a2facbb232b6fa6d4724933c4b0e0ab87cb4561f3bf8864ccaea6541bc3b5b172931e1d878ef6ca8f7c175af66b3be9bb3e4f54b6c1
SSDEEP

3072:q8FbE8vKsUiWC/2se5SJdEN0s4WE+3S9pui6yYPaI7DehizrVtNe:jkHTIENm+3Mpui6yYPaIGck

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c514b8e6e0de04fa27c48565cc4639c0N.exe
- Size
  
  160KB
- MD5
  
  c514b8e6e0de04fa27c48565cc4639c0
- SHA1
  
  0331614ae888dae4296089d815e6126c0d972c50
- SHA256
  
  389bfee1a5048fb84b056f8796ec7071469cdad0835a832691bfb9e5b41d7190
- SHA512
  
  3f724b0164aee034c5d52a2facbb232b6fa6d4724933c4b0e0ab87cb4561f3bf8864ccaea6541bc3b5b172931e1d878ef6ca8f7c175af66b3be9bb3e4f54b6c1
- SSDEEP
  
  3072:q8FbE8vKsUiWC/2se5SJdEN0s4WE+3S9pui6yYPaI7DehizrVtNe:jkHTIENm+3Mpui6yYPaIGck
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence