e2024116d9d4c84d141864e4b5dc57bec3f8649013a66df61a832c776ea69596 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9d2c8f6cf3b38c4f10af52042b33fc50N.exe
Size

95KB
Sample

240903-rdtxjayelm
MD5

9d2c8f6cf3b38c4f10af52042b33fc50
SHA1

8ae1e5a46fe7815aab8b0bc7c658156e0f85de1e
SHA256

e2024116d9d4c84d141864e4b5dc57bec3f8649013a66df61a832c776ea69596
SHA512

f311e34e543c5c94154b637f5f50fb5ca8073497b8baeafed2e7b701ec3c00e76c4b6b83525e736ee4e7313a4c488c10bb0a34f098c87a6f30de88913ac1dd54
SSDEEP

1536:6/dzgpqgS+rRbgJv2OA2dnlbrWpwNV4YC9qojZ/VpNhFZ9Rt4swcnocg0YM5lD1p:INgwgS8hWnJDkVjZV5lD1teXTWM1dQrr

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9d2c8f6cf3b38c4f10af52042b33fc50N.exe
- Size
  
  95KB
- MD5
  
  9d2c8f6cf3b38c4f10af52042b33fc50
- SHA1
  
  8ae1e5a46fe7815aab8b0bc7c658156e0f85de1e
- SHA256
  
  e2024116d9d4c84d141864e4b5dc57bec3f8649013a66df61a832c776ea69596
- SHA512
  
  f311e34e543c5c94154b637f5f50fb5ca8073497b8baeafed2e7b701ec3c00e76c4b6b83525e736ee4e7313a4c488c10bb0a34f098c87a6f30de88913ac1dd54
- SSDEEP
  
  1536:6/dzgpqgS+rRbgJv2OA2dnlbrWpwNV4YC9qojZ/VpNhFZ9Rt4swcnocg0YM5lD1p:INgwgS8hWnJDkVjZV5lD1teXTWM1dQrr
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence