031db1512cd4039666fe95fd6161df8ee080dc70ffdba709d489c29c7e13d301 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5408619bcd537fde6b393dd72a97e20N.exe
Size

64KB
Sample

240901-sj4vcsvdpb
MD5

c5408619bcd537fde6b393dd72a97e20
SHA1

aba9a00af592b6eaa3825647d6cf2d6b585fec87
SHA256

031db1512cd4039666fe95fd6161df8ee080dc70ffdba709d489c29c7e13d301
SHA512

d3ec905147d72d1b13cbf9a8f058889c774a8ab805d853e63075b833cbda9f389b3e6cd2691480830af47fe6485907708ee9a775c8020c7f6caca5e118e5da50
SSDEEP

768:P7L10U1jmuV58fngOJ+epkZZP5FSgi/1H55e6XJ1IwEGp9ThfzyYsHv:TL6EjmuPEHuZPXSgoDXUwXfzwv

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c5408619bcd537fde6b393dd72a97e20N.exe
- Size
  
  64KB
- MD5
  
  c5408619bcd537fde6b393dd72a97e20
- SHA1
  
  aba9a00af592b6eaa3825647d6cf2d6b585fec87
- SHA256
  
  031db1512cd4039666fe95fd6161df8ee080dc70ffdba709d489c29c7e13d301
- SHA512
  
  d3ec905147d72d1b13cbf9a8f058889c774a8ab805d853e63075b833cbda9f389b3e6cd2691480830af47fe6485907708ee9a775c8020c7f6caca5e118e5da50
- SSDEEP
  
  768:P7L10U1jmuV58fngOJ+epkZZP5FSgi/1H55e6XJ1IwEGp9ThfzyYsHv:TL6EjmuPEHuZPXSgoDXUwXfzwv
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence