15d97ccf82221f042cd8940931b77722048d73136a6ce6c424b04d1a16ac22be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49168069577276b703c6fc1571f8a670N.exe
Size

73KB
Sample

240901-r8q45athlh
MD5

49168069577276b703c6fc1571f8a670
SHA1

d44f8574b207a679daa0b51438ebbdc77110eff4
SHA256

15d97ccf82221f042cd8940931b77722048d73136a6ce6c424b04d1a16ac22be
SHA512

d8b8e7aff04d6675dad89192fd7a39b80d39d455d6196d06de3021856e35363865c05aca33048d64426cea579fcdc5fe60e6064cf532f50568cf86eabfd7670e
SSDEEP

1536:vnjshIkeGSc9A3rxWBTZI8UqRrptfUJC5YMkhohBM:vnITSx3r8G8UupOuUAM

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  49168069577276b703c6fc1571f8a670N.exe
- Size
  
  73KB
- MD5
  
  49168069577276b703c6fc1571f8a670
- SHA1
  
  d44f8574b207a679daa0b51438ebbdc77110eff4
- SHA256
  
  15d97ccf82221f042cd8940931b77722048d73136a6ce6c424b04d1a16ac22be
- SHA512
  
  d8b8e7aff04d6675dad89192fd7a39b80d39d455d6196d06de3021856e35363865c05aca33048d64426cea579fcdc5fe60e6064cf532f50568cf86eabfd7670e
- SSDEEP
  
  1536:vnjshIkeGSc9A3rxWBTZI8UqRrptfUJC5YMkhohBM:vnITSx3r8G8UupOuUAM
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence