a8148a6d44d1b97c782d201a9b3d7fbe0f213aeb792722525bf03e132d484844 | Triage

Sharing

General

Target

b741cad77e8bd78e5cc17743d18a9eb0N.exe
Size

96KB
Sample

240904-ka2dwaybpd
MD5

b741cad77e8bd78e5cc17743d18a9eb0
SHA1

369ae9967a2aad0d5eb8761a20ee92e27fa508f4
SHA256

a8148a6d44d1b97c782d201a9b3d7fbe0f213aeb792722525bf03e132d484844
SHA512

e4ad4920bbc45aaf333c079eb899a17c30eb07f589a3034059d650cfb454974a5e8c854d1153e5ebd6e0e9384c5e1d9a71a91fa3a0368faeb7335f0a774df3a4
SSDEEP

1536:QvTWiAS+T1IkefQWc+p1nrVKhF3eUSKphgAloXgvb9vdnL61/BOmSJCMy0QiLiiR:ITVAlJ2tp1nrVIF3eUXhgA0k9lnu15Oz

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b741cad77e8bd78e5cc17743d18a9eb0N.exe
- Size
  
  96KB
- MD5
  
  b741cad77e8bd78e5cc17743d18a9eb0
- SHA1
  
  369ae9967a2aad0d5eb8761a20ee92e27fa508f4
- SHA256
  
  a8148a6d44d1b97c782d201a9b3d7fbe0f213aeb792722525bf03e132d484844
- SHA512
  
  e4ad4920bbc45aaf333c079eb899a17c30eb07f589a3034059d650cfb454974a5e8c854d1153e5ebd6e0e9384c5e1d9a71a91fa3a0368faeb7335f0a774df3a4
- SSDEEP
  
  1536:QvTWiAS+T1IkefQWc+p1nrVKhF3eUSKphgAloXgvb9vdnL61/BOmSJCMy0QiLiiR:ITVAlJ2tp1nrVIF3eUXhgA0k9lnu15Oz
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence