c73301ec7504cacbd77695a718c2a61db95c375c6c5f0fc5db321a149f636bb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39580aba14aa462eb3e2716119397830N.exe
Size

318KB
Sample

240902-rlr3xasbpq
MD5

39580aba14aa462eb3e2716119397830
SHA1

3ece2cf4927f27019d1cfc36c2e24c7ec970676f
SHA256

c73301ec7504cacbd77695a718c2a61db95c375c6c5f0fc5db321a149f636bb9
SHA512

4a299721e56594434c7935b8683d08e6a74d93ea7a028b31ff3054336dce6316687c9c971f1c4eb3171a09dd124264bd129a698d4c232552a6fffb7059334358
SSDEEP

6144:u25bPRVEQHdMcm4FmowdHoS7c5cm4FmowdHoSrNF9xRVEQHd4:b5LO4wFHoS04wFHoSrZx8

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  39580aba14aa462eb3e2716119397830N.exe
- Size
  
  318KB
- MD5
  
  39580aba14aa462eb3e2716119397830
- SHA1
  
  3ece2cf4927f27019d1cfc36c2e24c7ec970676f
- SHA256
  
  c73301ec7504cacbd77695a718c2a61db95c375c6c5f0fc5db321a149f636bb9
- SHA512
  
  4a299721e56594434c7935b8683d08e6a74d93ea7a028b31ff3054336dce6316687c9c971f1c4eb3171a09dd124264bd129a698d4c232552a6fffb7059334358
- SSDEEP
  
  6144:u25bPRVEQHdMcm4FmowdHoS7c5cm4FmowdHoSrNF9xRVEQHd4:b5LO4wFHoS04wFHoSrZx8
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence