515fb77275453542174bf92191a68c17279c14801807b205b0da70a4ca3f4df8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d94b4a01ede5aa733d861504e04eaf50N.exe
Size

115KB
Sample

240902-h8v9eavfnq
MD5

d94b4a01ede5aa733d861504e04eaf50
SHA1

7b1d3f05a0da7837a4f5cb1539967091a59a5687
SHA256

515fb77275453542174bf92191a68c17279c14801807b205b0da70a4ca3f4df8
SHA512

69bcf2dbc8f379438cebbbdd4a675ffb7359a268871a3fda20a1bd6acd83bf8dbe77da2a1991a073d95480cd34f87a258e8c1cabf05ab83f811c01f0f2851130
SSDEEP

3072:vLrXVEgLWlkodbrIR/SoQUP5u30KqTKr4:Pi2xohrIooQUPoDqTKE

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d94b4a01ede5aa733d861504e04eaf50N.exe
- Size
  
  115KB
- MD5
  
  d94b4a01ede5aa733d861504e04eaf50
- SHA1
  
  7b1d3f05a0da7837a4f5cb1539967091a59a5687
- SHA256
  
  515fb77275453542174bf92191a68c17279c14801807b205b0da70a4ca3f4df8
- SHA512
  
  69bcf2dbc8f379438cebbbdd4a675ffb7359a268871a3fda20a1bd6acd83bf8dbe77da2a1991a073d95480cd34f87a258e8c1cabf05ab83f811c01f0f2851130
- SSDEEP
  
  3072:vLrXVEgLWlkodbrIR/SoQUP5u30KqTKr4:Pi2xohrIooQUPoDqTKE
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence