aba97f093d2a5305117d95e51692a5106e6490d694b8948c77fab55a3e21130a | Triage

Sharing

General

Target

2f247b46b1186464447ab59bc775f070N.exe
Size

111KB
Sample

240903-dtkrxaxbld
MD5

2f247b46b1186464447ab59bc775f070
SHA1

370402e7c5d4b8c3090c97aa00353b19f67a77fb
SHA256

aba97f093d2a5305117d95e51692a5106e6490d694b8948c77fab55a3e21130a
SHA512

8a582004b993195d5f155fc9ca6365d7acc1e74a3d0330e03dbc5d601c393428820011b0b20e0c57ffe77e314ba25a7061b700b4433db0f3869af71a50584a29
SSDEEP

3072:RLcElXmwiexj7WJEoeBE9pui6yYPaI7Dehib:RoEzisfuEjcpui6yYPaIGcb

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2f247b46b1186464447ab59bc775f070N.exe
- Size
  
  111KB
- MD5
  
  2f247b46b1186464447ab59bc775f070
- SHA1
  
  370402e7c5d4b8c3090c97aa00353b19f67a77fb
- SHA256
  
  aba97f093d2a5305117d95e51692a5106e6490d694b8948c77fab55a3e21130a
- SHA512
  
  8a582004b993195d5f155fc9ca6365d7acc1e74a3d0330e03dbc5d601c393428820011b0b20e0c57ffe77e314ba25a7061b700b4433db0f3869af71a50584a29
- SSDEEP
  
  3072:RLcElXmwiexj7WJEoeBE9pui6yYPaI7Dehib:RoEzisfuEjcpui6yYPaIGcb
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence