bd1e1a7366f36d9ab513abaf71e6f14af36453023a29670ae35f698c9841d847 | Triage

Sharing

General

Target

2fafdbf92895bd70636abf7a2398eca0N.exe
Size

285KB
Sample

240905-ptb1js1cjk
MD5

2fafdbf92895bd70636abf7a2398eca0
SHA1

209c0945e7bfb59fc341b8aac6bf46a53e6cd450
SHA256

bd1e1a7366f36d9ab513abaf71e6f14af36453023a29670ae35f698c9841d847
SHA512

4ea160884b40257ea3ca14fbd7a07e1667b8a6fb8ab51f29d2cfa84b53ecf5759da1e36660ea7969ae79a220125b3286426c334bb663466fb3ff9719004e0adc
SSDEEP

3072:LscueEqsieQKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:Lsos5QKQIoi7tWa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2fafdbf92895bd70636abf7a2398eca0N.exe
- Size
  
  285KB
- MD5
  
  2fafdbf92895bd70636abf7a2398eca0
- SHA1
  
  209c0945e7bfb59fc341b8aac6bf46a53e6cd450
- SHA256
  
  bd1e1a7366f36d9ab513abaf71e6f14af36453023a29670ae35f698c9841d847
- SHA512
  
  4ea160884b40257ea3ca14fbd7a07e1667b8a6fb8ab51f29d2cfa84b53ecf5759da1e36660ea7969ae79a220125b3286426c334bb663466fb3ff9719004e0adc
- SSDEEP
  
  3072:LscueEqsieQKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:Lsos5QKQIoi7tWa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence