d26ff1a691e8b523e53e7afea90bfc384f7d1ca446671ee3a862a51609b9256b | Triage

Sharing

General

Target

f26f7c2fd09621bbe3644a260bec1dc0N.exe
Size

110KB
Sample

240905-prg4sa1bpk
MD5

f26f7c2fd09621bbe3644a260bec1dc0
SHA1

d1c9d730b580ab44e9fb7eda6a7c0656b7d6f168
SHA256

d26ff1a691e8b523e53e7afea90bfc384f7d1ca446671ee3a862a51609b9256b
SHA512

0d7d7ef3f474859634e6cc3dc8be07eb5676d2a0b4b7f19b023ecdcf2a9313edbac18d85cf4d3c98d2daf81b6f5d9dd42de197f049c023f37d9ae70680794e01
SSDEEP

3072:kr7mfteJQNZ5bZU/BK40pKTLJiXSk6IXP:kr7m1WQNZ59q0vSk6k

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f26f7c2fd09621bbe3644a260bec1dc0N.exe
- Size
  
  110KB
- MD5
  
  f26f7c2fd09621bbe3644a260bec1dc0
- SHA1
  
  d1c9d730b580ab44e9fb7eda6a7c0656b7d6f168
- SHA256
  
  d26ff1a691e8b523e53e7afea90bfc384f7d1ca446671ee3a862a51609b9256b
- SHA512
  
  0d7d7ef3f474859634e6cc3dc8be07eb5676d2a0b4b7f19b023ecdcf2a9313edbac18d85cf4d3c98d2daf81b6f5d9dd42de197f049c023f37d9ae70680794e01
- SSDEEP
  
  3072:kr7mfteJQNZ5bZU/BK40pKTLJiXSk6IXP:kr7m1WQNZ59q0vSk6k
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence