4a7ea0fa1567104eb890b5db70ed6ae2256562fc29901e4d8c116ca6def398be | Triage

Sharing

General

Target

f9a9aa14a18760972ed923f445d3efb0N.exe
Size

256KB
Sample

240905-t65kvaward
MD5

f9a9aa14a18760972ed923f445d3efb0
SHA1

2f59708d1657fa8ae8f785b225028d23ce2fe6c2
SHA256

4a7ea0fa1567104eb890b5db70ed6ae2256562fc29901e4d8c116ca6def398be
SHA512

847f51de85393f042363a725a345afc76d9ac1b7019565bd75abb909640658b894bd895a674d0daa590bb0693bc875e50e872115fef6de48a75de270bbc76904
SSDEEP

6144:DHy+sUZkM0JsmFT3/fc/UmKyIxLDXXoq9FJZCX:DHtkMgc32XXf9DoX

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f9a9aa14a18760972ed923f445d3efb0N.exe
- Size
  
  256KB
- MD5
  
  f9a9aa14a18760972ed923f445d3efb0
- SHA1
  
  2f59708d1657fa8ae8f785b225028d23ce2fe6c2
- SHA256
  
  4a7ea0fa1567104eb890b5db70ed6ae2256562fc29901e4d8c116ca6def398be
- SHA512
  
  847f51de85393f042363a725a345afc76d9ac1b7019565bd75abb909640658b894bd895a674d0daa590bb0693bc875e50e872115fef6de48a75de270bbc76904
- SSDEEP
  
  6144:DHy+sUZkM0JsmFT3/fc/UmKyIxLDXXoq9FJZCX:DHtkMgc32XXf9DoX
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence