8aa07a029bd64e56a0c7a79788b71de07b689c1fc043e63bbbe1a187c62bc988 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

300b23ea469b130a96b7a0331e01dbe0N.exe
Size

387KB
Sample

240901-twwj7awbkl
MD5

300b23ea469b130a96b7a0331e01dbe0
SHA1

49fff6d969865ede9113a5534030a11440e4d27b
SHA256

8aa07a029bd64e56a0c7a79788b71de07b689c1fc043e63bbbe1a187c62bc988
SHA512

a27f23444c5df65e71ef0490a7141f5e9fa5ca06ebc1360bef37faf28c30c2859d98da876714646c49cca9ffda0b4955b3152063c0d385f64e9204b9e89cf00c
SSDEEP

6144:h05SBE9lsRHOEgHixuqjwszeXmpzKPJG9EeIMT:TB+ls4HiPjoPJG9EeIW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  300b23ea469b130a96b7a0331e01dbe0N.exe
- Size
  
  387KB
- MD5
  
  300b23ea469b130a96b7a0331e01dbe0
- SHA1
  
  49fff6d969865ede9113a5534030a11440e4d27b
- SHA256
  
  8aa07a029bd64e56a0c7a79788b71de07b689c1fc043e63bbbe1a187c62bc988
- SHA512
  
  a27f23444c5df65e71ef0490a7141f5e9fa5ca06ebc1360bef37faf28c30c2859d98da876714646c49cca9ffda0b4955b3152063c0d385f64e9204b9e89cf00c
- SSDEEP
  
  6144:h05SBE9lsRHOEgHixuqjwszeXmpzKPJG9EeIMT:TB+ls4HiPjoPJG9EeIW
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence