b676da0e05846a98ff74d0994fc3dc38c4421f8aa87c28bdbd2a0e3bb4c0e7e6 | Triage

Sharing

General

Target

5bf10ca5ea319400d2e4ba4b441a1ae0N.exe
Size

52KB
Sample

240901-qpmrxsscmb
MD5

5bf10ca5ea319400d2e4ba4b441a1ae0
SHA1

91a46441d2956cb0928c5e81869a23c14827cea2
SHA256

b676da0e05846a98ff74d0994fc3dc38c4421f8aa87c28bdbd2a0e3bb4c0e7e6
SHA512

459b2b66059bd51d683b02e3f9be0a469b1eb3ffe22c1e24e200c303a203d1104e7110cceb2fcd7f761059f704dd4998e3d89216ae1e0fa062989d8b5ec8e20b
SSDEEP

768:Zsn6SQa8tdK/RM0PWxxQ9gkzx3aA/tK036LmI7mdp/1H5F/sz1MABvKWe:Zs6SQ5ERM0Oxx4gkz91Wl7GMMAdKZ

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5bf10ca5ea319400d2e4ba4b441a1ae0N.exe
- Size
  
  52KB
- MD5
  
  5bf10ca5ea319400d2e4ba4b441a1ae0
- SHA1
  
  91a46441d2956cb0928c5e81869a23c14827cea2
- SHA256
  
  b676da0e05846a98ff74d0994fc3dc38c4421f8aa87c28bdbd2a0e3bb4c0e7e6
- SHA512
  
  459b2b66059bd51d683b02e3f9be0a469b1eb3ffe22c1e24e200c303a203d1104e7110cceb2fcd7f761059f704dd4998e3d89216ae1e0fa062989d8b5ec8e20b
- SSDEEP
  
  768:Zsn6SQa8tdK/RM0PWxxQ9gkzx3aA/tK036LmI7mdp/1H5F/sz1MABvKWe:Zs6SQ5ERM0Oxx4gkz91Wl7GMMAdKZ
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence