6f4f86f804275bcac6a527864fec9ada5d2273bb1bb3070b584b7606322f48b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e242ec37b3f82a4d915addd42092f40N.exe
Size

96KB
Sample

240904-e84zrsvdlp
MD5

3e242ec37b3f82a4d915addd42092f40
SHA1

230df28e79fc9f98679e44c0fb52e51e4964b9d4
SHA256

6f4f86f804275bcac6a527864fec9ada5d2273bb1bb3070b584b7606322f48b8
SHA512

ceed47f52f8b9a8dfc018074a30555549c5b9e6b3e9f4f7d6b714fa3d51471e2dc522b89e62e8a0c1236bf40829ba3bbeadce93fadd6b1786ec8c1a90b25d2b1
SSDEEP

1536:kgHJtMDVDVz7aoOQXj79SgLp47fTNnXSbEUIYB9KxiKK/BOmtDCMy0QiLiizHNQi:NHLcVB7PruhaMxXK5OmRCMyELiAHONdq

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3e242ec37b3f82a4d915addd42092f40N.exe
- Size
  
  96KB
- MD5
  
  3e242ec37b3f82a4d915addd42092f40
- SHA1
  
  230df28e79fc9f98679e44c0fb52e51e4964b9d4
- SHA256
  
  6f4f86f804275bcac6a527864fec9ada5d2273bb1bb3070b584b7606322f48b8
- SHA512
  
  ceed47f52f8b9a8dfc018074a30555549c5b9e6b3e9f4f7d6b714fa3d51471e2dc522b89e62e8a0c1236bf40829ba3bbeadce93fadd6b1786ec8c1a90b25d2b1
- SSDEEP
  
  1536:kgHJtMDVDVz7aoOQXj79SgLp47fTNnXSbEUIYB9KxiKK/BOmtDCMy0QiLiizHNQi:NHLcVB7PruhaMxXK5OmRCMyELiAHONdq
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence