81c3d80ec9b9dd22aab18200ae254434b4f83a2540c1892c51d28f08c6f9811a | Triage

Sharing

General

Target

f1f8fdda47a331491e21c01ee991de40N.exe
Size

89KB
Sample

240903-hzjt1s1amn
MD5

f1f8fdda47a331491e21c01ee991de40
SHA1

923e42e1a0b61d538dbf1ccd95c5ba8888197b8e
SHA256

81c3d80ec9b9dd22aab18200ae254434b4f83a2540c1892c51d28f08c6f9811a
SHA512

88858805dc06a95e3f761b1c3eb050aa207f8410053d7ff40814fdd3aa3723d8494c7eb5980ef38661c41ec714aa8dbf966f164afc50cc25b2fa218d500538cd
SSDEEP

1536:l0lWvs/GeSKqiphVZkxb9ncYI6UBKxP7kRQAGR+KRFR3RzR1URJrCiuiNj5QkMMn:l0GleudcYEKxzkeBjb5ZXUf2iuOj22lN

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f1f8fdda47a331491e21c01ee991de40N.exe
- Size
  
  89KB
- MD5
  
  f1f8fdda47a331491e21c01ee991de40
- SHA1
  
  923e42e1a0b61d538dbf1ccd95c5ba8888197b8e
- SHA256
  
  81c3d80ec9b9dd22aab18200ae254434b4f83a2540c1892c51d28f08c6f9811a
- SHA512
  
  88858805dc06a95e3f761b1c3eb050aa207f8410053d7ff40814fdd3aa3723d8494c7eb5980ef38661c41ec714aa8dbf966f164afc50cc25b2fa218d500538cd
- SSDEEP
  
  1536:l0lWvs/GeSKqiphVZkxb9ncYI6UBKxP7kRQAGR+KRFR3RzR1URJrCiuiNj5QkMMn:l0GleudcYEKxzkeBjb5ZXUf2iuOj22lN
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence