967a00f0f4b2a02ffb8bc98b7e0390691ba7a9a1850d2aaa9816d52545fd16ed | Triage

Sharing

General

Target

fb2e3c97a7f5a65efa502a1dcbb905f0N.exe
Size

246KB
Sample

240903-3fc8ca1fka
MD5

fb2e3c97a7f5a65efa502a1dcbb905f0
SHA1

bdaa99d027f63920f1185bd4da9a31bd7a65761f
SHA256

967a00f0f4b2a02ffb8bc98b7e0390691ba7a9a1850d2aaa9816d52545fd16ed
SHA512

8e24201f56e2944b6a33e905605f5fe4b65189752ae3b79f3b99ad9e29addd38ee844c71fe2228f5c1f859b98e1715b2a3c44da0a046a1c8fe1141fc917f590b
SSDEEP

3072:7Kmu0aMdghZtXmjs2B1xdLm102VZjuajDMyap9jCyFsWteYCWS3OF9HqoX:7Kmu0S/mjs2B1xBm102VQlterS9HrX

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fb2e3c97a7f5a65efa502a1dcbb905f0N.exe
- Size
  
  246KB
- MD5
  
  fb2e3c97a7f5a65efa502a1dcbb905f0
- SHA1
  
  bdaa99d027f63920f1185bd4da9a31bd7a65761f
- SHA256
  
  967a00f0f4b2a02ffb8bc98b7e0390691ba7a9a1850d2aaa9816d52545fd16ed
- SHA512
  
  8e24201f56e2944b6a33e905605f5fe4b65189752ae3b79f3b99ad9e29addd38ee844c71fe2228f5c1f859b98e1715b2a3c44da0a046a1c8fe1141fc917f590b
- SSDEEP
  
  3072:7Kmu0aMdghZtXmjs2B1xdLm102VZjuajDMyap9jCyFsWteYCWS3OF9HqoX:7Kmu0S/mjs2B1xBm102VQlterS9HrX
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence