a1bb02d0ad71e07473d2d2d79ce8b3497755a29bebb0f69d5c542a111982da30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4799cef260bd4770c9afdd74a4d1620N.exe
Size

45KB
Sample

240903-cwzs6svbnr
MD5

f4799cef260bd4770c9afdd74a4d1620
SHA1

6ecd1034cfd35f30a7497d1ae19715b1552c16cd
SHA256

a1bb02d0ad71e07473d2d2d79ce8b3497755a29bebb0f69d5c542a111982da30
SHA512

7849ac8cde0cc8efeffa9a3a1feebbbc2948ca0fd66edc85435d9598b3902e72a18a0ee518487f3d9cb00006b8da603d35df8dd124716b7eb39da77a50e0f822
SSDEEP

768:YlMrvlpPIxFxZ/BSLBYM38mr99gxrbo5oIMg8osA/w0IMgk48QUosAEYcw0IMgkr:LpP0xX5k9gxAmIMg8osA/w0IMgk48QU7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f4799cef260bd4770c9afdd74a4d1620N.exe
- Size
  
  45KB
- MD5
  
  f4799cef260bd4770c9afdd74a4d1620
- SHA1
  
  6ecd1034cfd35f30a7497d1ae19715b1552c16cd
- SHA256
  
  a1bb02d0ad71e07473d2d2d79ce8b3497755a29bebb0f69d5c542a111982da30
- SHA512
  
  7849ac8cde0cc8efeffa9a3a1feebbbc2948ca0fd66edc85435d9598b3902e72a18a0ee518487f3d9cb00006b8da603d35df8dd124716b7eb39da77a50e0f822
- SSDEEP
  
  768:YlMrvlpPIxFxZ/BSLBYM38mr99gxrbo5oIMg8osA/w0IMgk48QUosAEYcw0IMgkr:LpP0xX5k9gxAmIMg8osA/w0IMgk48QU7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence