0a438a50ab031dfb415e933d6198eff03b45aa93a235ab26d6c775b6c0321410 | Triage

Sharing

General

Target

bac60c349558b153fb624fbecbf9dbc0N.exe
Size

78KB
Sample

240903-xxhlhavamj
MD5

bac60c349558b153fb624fbecbf9dbc0
SHA1

3d518fd932f6b29c4b467cd188be2fe05187eb3e
SHA256

0a438a50ab031dfb415e933d6198eff03b45aa93a235ab26d6c775b6c0321410
SHA512

b386d1c39f288f6ed3ed5069129895f334d220a5328e21d124a9fb82d6e879955d02d802f5aef52dd328b15b5f5fec5af18cc51850558c7219a28fd990c54c88
SSDEEP

768:BBkzGBrw0izA4pyEaVJsY5NdbL6d4WVFiO4HvK1nxd93zJCDuo/1H5v5Xdnhg8+H:PcuKzA4wtO4Hi1xvFiVbN+zL20gJi1ie

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bac60c349558b153fb624fbecbf9dbc0N.exe
- Size
  
  78KB
- MD5
  
  bac60c349558b153fb624fbecbf9dbc0
- SHA1
  
  3d518fd932f6b29c4b467cd188be2fe05187eb3e
- SHA256
  
  0a438a50ab031dfb415e933d6198eff03b45aa93a235ab26d6c775b6c0321410
- SHA512
  
  b386d1c39f288f6ed3ed5069129895f334d220a5328e21d124a9fb82d6e879955d02d802f5aef52dd328b15b5f5fec5af18cc51850558c7219a28fd990c54c88
- SSDEEP
  
  768:BBkzGBrw0izA4pyEaVJsY5NdbL6d4WVFiO4HvK1nxd93zJCDuo/1H5v5Xdnhg8+H:PcuKzA4wtO4Hi1xvFiVbN+zL20gJi1ie
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence