3591b8cb7267ffb0b8a8e7510e1358bba6e5b9b3b00b889cc4328a8e0bf32dbc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c6a4de63274422e0fa43cc0aa880040N.exe
Size

64KB
Sample

240905-ccs7aa1cnp
MD5

5c6a4de63274422e0fa43cc0aa880040
SHA1

2cfa07b8f69ec4b1718d0436492c15ee944ec042
SHA256

3591b8cb7267ffb0b8a8e7510e1358bba6e5b9b3b00b889cc4328a8e0bf32dbc
SHA512

e38a16e609591ac3257bc7cb492dade3d93b571c0b618886a5c1665759d75e8750cec43c256985d9f6e0ae99fc2c833312b057111aa8bfb3a56d2afa41ca0d7b
SSDEEP

1536:lRxzPBj/PQKebGlrnTthmVYQEGbI7f7C7f7f7o7o7o7NpOvIWyKrPFW2iwTbW:x5cgnTzZsI7f7C7f7f7o7o7o7NOIX+FY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5c6a4de63274422e0fa43cc0aa880040N.exe
- Size
  
  64KB
- MD5
  
  5c6a4de63274422e0fa43cc0aa880040
- SHA1
  
  2cfa07b8f69ec4b1718d0436492c15ee944ec042
- SHA256
  
  3591b8cb7267ffb0b8a8e7510e1358bba6e5b9b3b00b889cc4328a8e0bf32dbc
- SHA512
  
  e38a16e609591ac3257bc7cb492dade3d93b571c0b618886a5c1665759d75e8750cec43c256985d9f6e0ae99fc2c833312b057111aa8bfb3a56d2afa41ca0d7b
- SSDEEP
  
  1536:lRxzPBj/PQKebGlrnTthmVYQEGbI7f7C7f7f7o7o7o7NpOvIWyKrPFW2iwTbW:x5cgnTzZsI7f7C7f7f7o7o7o7NOIX+FY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence