054d51a64374139fc972d966e54a484759263843dc618ba4aac6dd07f008a210 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6f5ecbb4679b74af1d61591af75869f0N.exe
Size

72KB
Sample

240901-zr4ynascje
MD5

6f5ecbb4679b74af1d61591af75869f0
SHA1

b3c30e8537d11b1c7f2cdf51063b108560d911b5
SHA256

054d51a64374139fc972d966e54a484759263843dc618ba4aac6dd07f008a210
SHA512

4e4638b313d9979ac30ffc66411d5d43388322345d1a35832fd8f5080e32eb6449c9714a48f38bcb2f27ebcee183c780d3cddd169a2fb4ee483f2af704155ddc
SSDEEP

768:5uHQA7ft4A4K8oPTZY5CI1O2Ew8Qow/5lVn5mhf9/LQYVogvd/Wu/hzhcujpVsMK:XA7ft4AHNY531MJAlV5mD/LagleEz9w

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6f5ecbb4679b74af1d61591af75869f0N.exe
- Size
  
  72KB
- MD5
  
  6f5ecbb4679b74af1d61591af75869f0
- SHA1
  
  b3c30e8537d11b1c7f2cdf51063b108560d911b5
- SHA256
  
  054d51a64374139fc972d966e54a484759263843dc618ba4aac6dd07f008a210
- SHA512
  
  4e4638b313d9979ac30ffc66411d5d43388322345d1a35832fd8f5080e32eb6449c9714a48f38bcb2f27ebcee183c780d3cddd169a2fb4ee483f2af704155ddc
- SSDEEP
  
  768:5uHQA7ft4A4K8oPTZY5CI1O2Ew8Qow/5lVn5mhf9/LQYVogvd/Wu/hzhcujpVsMK:XA7ft4AHNY531MJAlV5mD/LagleEz9w
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence