0cc1cb28c1b5a6fcc9d1dd84f10c49587247098c0c9fe425b08ad74fa8f81d0f | Triage

Sharing

General

Target

8b7180fc00ead52517c624a1467cf480N.exe
Size

60KB
Sample

240902-pkrpms1ckh
MD5

8b7180fc00ead52517c624a1467cf480
SHA1

52ec0951bd04e45ebb103854958b4aef051c506c
SHA256

0cc1cb28c1b5a6fcc9d1dd84f10c49587247098c0c9fe425b08ad74fa8f81d0f
SHA512

fd0fe250e83de7793ea9da155d95bb3f2e9d0d67e52ebf433256331ad1eeb8e108f4b12eff1ee9bd84cdc240d8423bfb23a82afde53cd9579d9c2a4479b3a1b3
SSDEEP

1536:D+kLrTkeZSVssCHaCt71JnvBstteIGoUtPjs8TTsI5xB86l1rs:xTkISVwPNvBstteIktPjPTs6xB86l1rs

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8b7180fc00ead52517c624a1467cf480N.exe
- Size
  
  60KB
- MD5
  
  8b7180fc00ead52517c624a1467cf480
- SHA1
  
  52ec0951bd04e45ebb103854958b4aef051c506c
- SHA256
  
  0cc1cb28c1b5a6fcc9d1dd84f10c49587247098c0c9fe425b08ad74fa8f81d0f
- SHA512
  
  fd0fe250e83de7793ea9da155d95bb3f2e9d0d67e52ebf433256331ad1eeb8e108f4b12eff1ee9bd84cdc240d8423bfb23a82afde53cd9579d9c2a4479b3a1b3
- SSDEEP
  
  1536:D+kLrTkeZSVssCHaCt71JnvBstteIGoUtPjs8TTsI5xB86l1rs:xTkISVwPNvBstteIktPjPTs6xB86l1rs
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence