44460d362dc648f8a6e889d09ae35b87c46023a53afb798915721b91359aff59 | Triage

Sharing

General

Target

d537d6c1b98f8eb0771a6011f4e019e0N.exe
Size

91KB
Sample

240902-ztjeqsxark
MD5

d537d6c1b98f8eb0771a6011f4e019e0
SHA1

e05c84184bc0517ac11bc88ebc8a7939ff15f69d
SHA256

44460d362dc648f8a6e889d09ae35b87c46023a53afb798915721b91359aff59
SHA512

7e21dcf79d660e29593b250bc00043d3df80fdd594ed7e72fa6bf66ee9b6983fdeabc68afd17373f44db808c066a0fbeafe39be40c939da3a7542964a32d3947
SSDEEP

1536:JS2X0XIx6joOuAXVd6NR7fCCsN0dUZgCXVXfYr/viVMi:Jh96joKz6HeCUYQrlvo/vOMi

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d537d6c1b98f8eb0771a6011f4e019e0N.exe
- Size
  
  91KB
- MD5
  
  d537d6c1b98f8eb0771a6011f4e019e0
- SHA1
  
  e05c84184bc0517ac11bc88ebc8a7939ff15f69d
- SHA256
  
  44460d362dc648f8a6e889d09ae35b87c46023a53afb798915721b91359aff59
- SHA512
  
  7e21dcf79d660e29593b250bc00043d3df80fdd594ed7e72fa6bf66ee9b6983fdeabc68afd17373f44db808c066a0fbeafe39be40c939da3a7542964a32d3947
- SSDEEP
  
  1536:JS2X0XIx6joOuAXVd6NR7fCCsN0dUZgCXVXfYr/viVMi:Jh96joKz6HeCUYQrlvo/vOMi
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence