be92173d8b990b419bc417b06c2693e232b5c3a95afa607d6d7734b089d1ca5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fce5ba039e84bc5157dd770d1c425990N.exe
Size

96KB
Sample

240903-rlw2vszfpf
MD5

fce5ba039e84bc5157dd770d1c425990
SHA1

1c6d00b209d14329e53b2627438eb217ea47426d
SHA256

be92173d8b990b419bc417b06c2693e232b5c3a95afa607d6d7734b089d1ca5d
SHA512

7de90915e098b4615dc23090fc7632f8fb7ab2c81178ed2d6542cba1f8936b77cdbb1bd3de3be02982ef82e9d262a52d70b78da906974b12a19b187c4e123f16
SSDEEP

1536:vdG7E2kTngmn/f1ZcJdWSjnO1qfCAn3xiUM/4JV1MaOuhrUQVoMdUT+irF:CkTnXTaVesC4hiUMhuhr1Rhk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fce5ba039e84bc5157dd770d1c425990N.exe
- Size
  
  96KB
- MD5
  
  fce5ba039e84bc5157dd770d1c425990
- SHA1
  
  1c6d00b209d14329e53b2627438eb217ea47426d
- SHA256
  
  be92173d8b990b419bc417b06c2693e232b5c3a95afa607d6d7734b089d1ca5d
- SHA512
  
  7de90915e098b4615dc23090fc7632f8fb7ab2c81178ed2d6542cba1f8936b77cdbb1bd3de3be02982ef82e9d262a52d70b78da906974b12a19b187c4e123f16
- SSDEEP
  
  1536:vdG7E2kTngmn/f1ZcJdWSjnO1qfCAn3xiUM/4JV1MaOuhrUQVoMdUT+irF:CkTnXTaVesC4hiUMhuhr1Rhk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence