ab97cd64a095303bd8bd3649ee4c48457566e48cc38a819f27f6f673959fc2f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca65bd8f11a019d5641603faa8893f40N.exe
Size

9.9MB
Sample

240904-1ezzlswhkm
MD5

ca65bd8f11a019d5641603faa8893f40
SHA1

14b709fa99d8f2f7ed0fb354757e9736d04b712a
SHA256

ab97cd64a095303bd8bd3649ee4c48457566e48cc38a819f27f6f673959fc2f7
SHA512

b5cf45487c520f11504d35c20c915669d16f7cd12640cf4070c1010fb55b4f6103290002c34342a76f6bea602e0e3a4d6a0f7419ef1b2a15a91a7137071d6723
SSDEEP

196608:GeTqnhgJuP3LAhCiVXCWeZLsA1oMuWr45hrr2e:qS+LVReJWGhrr2e

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ca65bd8f11a019d5641603faa8893f40N.exe
- Size
  
  9.9MB
- MD5
  
  ca65bd8f11a019d5641603faa8893f40
- SHA1
  
  14b709fa99d8f2f7ed0fb354757e9736d04b712a
- SHA256
  
  ab97cd64a095303bd8bd3649ee4c48457566e48cc38a819f27f6f673959fc2f7
- SHA512
  
  b5cf45487c520f11504d35c20c915669d16f7cd12640cf4070c1010fb55b4f6103290002c34342a76f6bea602e0e3a4d6a0f7419ef1b2a15a91a7137071d6723
- SSDEEP
  
  196608:GeTqnhgJuP3LAhCiVXCWeZLsA1oMuWr45hrr2e:qS+LVReJWGhrr2e
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence