0db3e92ede95a5bfa795fae76ff030f9300e5c24049dc41e1f6fe1cc3c9b1f32 | Triage

Sharing

General

Target

2179dff0e770ba4f2590be2548a5db70N.exe
Size

72KB
Sample

240902-g4wtpsveqf
MD5

2179dff0e770ba4f2590be2548a5db70
SHA1

7c584bcc6a21b4c46f60494ae8c2f7a82b1cec1c
SHA256

0db3e92ede95a5bfa795fae76ff030f9300e5c24049dc41e1f6fe1cc3c9b1f32
SHA512

20537bef839d46c40850b96e2c9b0df80c5ae89dae8a8d3822a9ac2691e2c04d3e74927c25ba937c075c9b94aaed5b7f11fb495f67b040581be79f604288da5d
SSDEEP

1536:n4P9CpQZn8XnBCxv9OA2dSXWFp+ybTNA:4P9CpQx8XnBUvmEWFp+eNA

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2179dff0e770ba4f2590be2548a5db70N.exe
- Size
  
  72KB
- MD5
  
  2179dff0e770ba4f2590be2548a5db70
- SHA1
  
  7c584bcc6a21b4c46f60494ae8c2f7a82b1cec1c
- SHA256
  
  0db3e92ede95a5bfa795fae76ff030f9300e5c24049dc41e1f6fe1cc3c9b1f32
- SHA512
  
  20537bef839d46c40850b96e2c9b0df80c5ae89dae8a8d3822a9ac2691e2c04d3e74927c25ba937c075c9b94aaed5b7f11fb495f67b040581be79f604288da5d
- SSDEEP
  
  1536:n4P9CpQZn8XnBCxv9OA2dSXWFp+ybTNA:4P9CpQx8XnBUvmEWFp+eNA
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence