27ad8ac3de68453632e1abd33e1e3774380baa96694f45d80337c2b77da6bce1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e6261fa00b6c380214d704e5aba3620N.exe
Size

79KB
Sample

240903-n9dnmswclj
MD5

3e6261fa00b6c380214d704e5aba3620
SHA1

37727dc8db876531172f6569459ce3726994017c
SHA256

27ad8ac3de68453632e1abd33e1e3774380baa96694f45d80337c2b77da6bce1
SHA512

61a0003d27a6d9aee034e936859db0cd11e6ad180305702d9cdf46f387f98a87892b1dc714622112372a40ce11fa273e4806ff2d572f84035ac9fc87ede402b1
SSDEEP

1536:2liHp9XmlHf8HBs/i3HGeL6eK8MsjY3UEFiFkSIgiItKq9v6DK:2ls2l/aB8i3HXThSUEFixtBtKq9vV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3e6261fa00b6c380214d704e5aba3620N.exe
- Size
  
  79KB
- MD5
  
  3e6261fa00b6c380214d704e5aba3620
- SHA1
  
  37727dc8db876531172f6569459ce3726994017c
- SHA256
  
  27ad8ac3de68453632e1abd33e1e3774380baa96694f45d80337c2b77da6bce1
- SHA512
  
  61a0003d27a6d9aee034e936859db0cd11e6ad180305702d9cdf46f387f98a87892b1dc714622112372a40ce11fa273e4806ff2d572f84035ac9fc87ede402b1
- SSDEEP
  
  1536:2liHp9XmlHf8HBs/i3HGeL6eK8MsjY3UEFiFkSIgiItKq9v6DK:2ls2l/aB8i3HXThSUEFixtBtKq9vV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence