fc5b4bbae2505e6680fbeba92b9b4202c195ba4a8a829fe1684824a29c716e44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e83b7177171fb77bd80039b38b46500N.exe
Size

364KB
Sample

240903-2299ja1cle
MD5

2e83b7177171fb77bd80039b38b46500
SHA1

1ce6f51908bdf31487cce26d67099c38035786c4
SHA256

fc5b4bbae2505e6680fbeba92b9b4202c195ba4a8a829fe1684824a29c716e44
SHA512

a4f922e5ec18fcad2e1e79200ff96f868ae69f4738a6b9d402cb4f6f3bd93fab9bf356709d8a5397e164d55a1429112827fd5df737dbc632849ce58d67b636d5
SSDEEP

6144:yFmmacbe0V+tbFOLM77OLnFe3HCqxNRmJ4PavntPRRI:yartsNePmjvtPRRI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2e83b7177171fb77bd80039b38b46500N.exe
- Size
  
  364KB
- MD5
  
  2e83b7177171fb77bd80039b38b46500
- SHA1
  
  1ce6f51908bdf31487cce26d67099c38035786c4
- SHA256
  
  fc5b4bbae2505e6680fbeba92b9b4202c195ba4a8a829fe1684824a29c716e44
- SHA512
  
  a4f922e5ec18fcad2e1e79200ff96f868ae69f4738a6b9d402cb4f6f3bd93fab9bf356709d8a5397e164d55a1429112827fd5df737dbc632849ce58d67b636d5
- SSDEEP
  
  6144:yFmmacbe0V+tbFOLM77OLnFe3HCqxNRmJ4PavntPRRI:yartsNePmjvtPRRI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence