82940a5a7e12ef4b28ffe0415593903107b72d7edf0818f1835164aa3d1b1172 | Triage

Sharing

General

Target

9e846a94013546108a9d0e468f6b4e30N.exe
Size

71KB
Sample

240902-p452dazhmq
MD5

9e846a94013546108a9d0e468f6b4e30
SHA1

3aa81687aa7f8290538564ac2b93289d28308bda
SHA256

82940a5a7e12ef4b28ffe0415593903107b72d7edf0818f1835164aa3d1b1172
SHA512

ca8d0c8ad169a0c234ceef7dbadf8ab92e9a559b39a4dd469cc36d29b2cad6349f7a821dd52c420882660c06b9bc849dfd76a222e752ff75fc3f605459de09e3
SSDEEP

1536:Qdm8Vkebcrg5x7WKIE4tWWigqe9IMkkq4+vWbPxF+KHgiUkyRQcK1P+ATT:Qd99wgTKyzylqexXyePP+A3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9e846a94013546108a9d0e468f6b4e30N.exe
- Size
  
  71KB
- MD5
  
  9e846a94013546108a9d0e468f6b4e30
- SHA1
  
  3aa81687aa7f8290538564ac2b93289d28308bda
- SHA256
  
  82940a5a7e12ef4b28ffe0415593903107b72d7edf0818f1835164aa3d1b1172
- SHA512
  
  ca8d0c8ad169a0c234ceef7dbadf8ab92e9a559b39a4dd469cc36d29b2cad6349f7a821dd52c420882660c06b9bc849dfd76a222e752ff75fc3f605459de09e3
- SSDEEP
  
  1536:Qdm8Vkebcrg5x7WKIE4tWWigqe9IMkkq4+vWbPxF+KHgiUkyRQcK1P+ATT:Qd99wgTKyzylqexXyePP+A3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence