24e145721275f450c87a0fe1c14bdf9a286de145a61bf56da54620a1a48e3d9e | Triage

Sharing

General

Target

6560a103c7a23d16e4763b27c27cad10N.exe
Size

80KB
Sample

240903-ld5q5sthlb
MD5

6560a103c7a23d16e4763b27c27cad10
SHA1

7d0a526c988ceb48831cf10257bd7fc2fdad8578
SHA256

24e145721275f450c87a0fe1c14bdf9a286de145a61bf56da54620a1a48e3d9e
SHA512

9cfb18196ec07b90385aa9822724011e6b1c195b63d9e9596d095dc76c7c0134672092cdb4c19a4f82b13f3040822ee1e685a680f25e25220a570e627b39e994
SSDEEP

1536:+pgu1FhuHJwOBq4XwwFaMiVON+zL20gJi1i9:UzhheqMiVOgzL20WKS

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6560a103c7a23d16e4763b27c27cad10N.exe
- Size
  
  80KB
- MD5
  
  6560a103c7a23d16e4763b27c27cad10
- SHA1
  
  7d0a526c988ceb48831cf10257bd7fc2fdad8578
- SHA256
  
  24e145721275f450c87a0fe1c14bdf9a286de145a61bf56da54620a1a48e3d9e
- SHA512
  
  9cfb18196ec07b90385aa9822724011e6b1c195b63d9e9596d095dc76c7c0134672092cdb4c19a4f82b13f3040822ee1e685a680f25e25220a570e627b39e994
- SSDEEP
  
  1536:+pgu1FhuHJwOBq4XwwFaMiVON+zL20gJi1i9:UzhheqMiVOgzL20WKS
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence