df74a873a6a4347acbed33b313ceb594d4e6c5a8f96f67e6260c09ec02d92330 | Triage

Sharing

General

Target

85d8c220a8840e4cc4470be436d7b980N.exe
Size

64KB
Sample

240901-qnn9csscje
MD5

85d8c220a8840e4cc4470be436d7b980
SHA1

f6bfdb89baf6fba421f2a12c1d46c63960fb6fee
SHA256

df74a873a6a4347acbed33b313ceb594d4e6c5a8f96f67e6260c09ec02d92330
SHA512

3b8c228b8ed166042f593b596ee9cefa930f4c36e6337acf687c041008e581757d0fe9bb4c3fd927993e0b56aad5cde2ce21d9e6ca2773bd787c2e21996e455c
SSDEEP

1536:zhSsAO4YYa2ecPAKcXMIP3MjSXMvrAuP1gNtn:QsNdYa2ecPAKcXMIP38SMvrnP1gL

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  85d8c220a8840e4cc4470be436d7b980N.exe
- Size
  
  64KB
- MD5
  
  85d8c220a8840e4cc4470be436d7b980
- SHA1
  
  f6bfdb89baf6fba421f2a12c1d46c63960fb6fee
- SHA256
  
  df74a873a6a4347acbed33b313ceb594d4e6c5a8f96f67e6260c09ec02d92330
- SHA512
  
  3b8c228b8ed166042f593b596ee9cefa930f4c36e6337acf687c041008e581757d0fe9bb4c3fd927993e0b56aad5cde2ce21d9e6ca2773bd787c2e21996e455c
- SSDEEP
  
  1536:zhSsAO4YYa2ecPAKcXMIP3MjSXMvrAuP1gNtn:QsNdYa2ecPAKcXMIP38SMvrnP1gL
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence