8bfee68dc95746cd790fc6a02fb0efaf88a58f963c17c34903d87f794ec6cd26 | Triage

Sharing

General

Target

a9f21753afe0a6516ddbcdf9d493a160N.exe
Size

364KB
Sample

240902-g9q6eathkq
MD5

a9f21753afe0a6516ddbcdf9d493a160
SHA1

5576bb872eef3c3d56194c3b34ae2dc74eabe8cb
SHA256

8bfee68dc95746cd790fc6a02fb0efaf88a58f963c17c34903d87f794ec6cd26
SHA512

939e74bfdf21f4d17c307f4880d8a53f6d9687b51e31d6a17d038addb608cc80cb789ee2327798307937de569db045c2568d19533851f2ce96e31c63f1f1de48
SSDEEP

6144:s+Yo7sFj5tT3sFwJk7hDplcsFj5tT3sF:Js15tLsp1Dpis15tLs

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a9f21753afe0a6516ddbcdf9d493a160N.exe
- Size
  
  364KB
- MD5
  
  a9f21753afe0a6516ddbcdf9d493a160
- SHA1
  
  5576bb872eef3c3d56194c3b34ae2dc74eabe8cb
- SHA256
  
  8bfee68dc95746cd790fc6a02fb0efaf88a58f963c17c34903d87f794ec6cd26
- SHA512
  
  939e74bfdf21f4d17c307f4880d8a53f6d9687b51e31d6a17d038addb608cc80cb789ee2327798307937de569db045c2568d19533851f2ce96e31c63f1f1de48
- SSDEEP
  
  6144:s+Yo7sFj5tT3sFwJk7hDplcsFj5tT3sF:Js15tLsp1Dpis15tLs
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence