a6b0a6248ef8b810c04ac703b36173fbc2dfad2c57d2b159fbbeada067cf26d1 | Triage

Sharing

General

Target

f1ee374d5ea9c2d54fb388ecff218330N.exe
Size

465KB
Sample

240904-k4279sxdkk
MD5

f1ee374d5ea9c2d54fb388ecff218330
SHA1

ccde3ea8c76366f472348b81818cc58fba842efa
SHA256

a6b0a6248ef8b810c04ac703b36173fbc2dfad2c57d2b159fbbeada067cf26d1
SHA512

9214672d2363b7811ef52094f634a77b37ea2e35e840f7e7862d9bf65ee97d70ba6b9acac0cb013ba25058af4c1a55ec9fd76901fb93a6ab0eb1ee0a64a2e7d9
SSDEEP

6144:bQj/Iw5PVzcqOILKpn/a5/VF5V4lKjIbvBhRJfzSf9x7N/I7b9M:8/Iw5PVJO8S/WNLKlUmpRe94a

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f1ee374d5ea9c2d54fb388ecff218330N.exe
- Size
  
  465KB
- MD5
  
  f1ee374d5ea9c2d54fb388ecff218330
- SHA1
  
  ccde3ea8c76366f472348b81818cc58fba842efa
- SHA256
  
  a6b0a6248ef8b810c04ac703b36173fbc2dfad2c57d2b159fbbeada067cf26d1
- SHA512
  
  9214672d2363b7811ef52094f634a77b37ea2e35e840f7e7862d9bf65ee97d70ba6b9acac0cb013ba25058af4c1a55ec9fd76901fb93a6ab0eb1ee0a64a2e7d9
- SSDEEP
  
  6144:bQj/Iw5PVzcqOILKpn/a5/VF5V4lKjIbvBhRJfzSf9x7N/I7b9M:8/Iw5PVJO8S/WNLKlUmpRe94a
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence