bf8e81e0073d343bc898327003abd81f090148eee328d886c15ed4d148e07635 | Triage

Sharing

General

Target

2796931376b3fa57546b47cff42ee380N.exe
Size

72KB
Sample

240905-vj1h2svgpq
MD5

2796931376b3fa57546b47cff42ee380
SHA1

bc562124b9e62158b79dfeb8bd70abfbd728e1ec
SHA256

bf8e81e0073d343bc898327003abd81f090148eee328d886c15ed4d148e07635
SHA512

29da50d9747d784d9ecc3552573e06eeb38594c3040f195d50d6336be29a009c81660e5d14089465c9c25c2c1ef19c3eff7632c5d3b7580206a0547554938206
SSDEEP

1536:VsPrAis+lYYaFMdSOkpwaVs3XEjTxRQXDbEyRCRRRoR4Rk4:OPrAis+lHaW4JvyXEjdevEy032ya4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2796931376b3fa57546b47cff42ee380N.exe
- Size
  
  72KB
- MD5
  
  2796931376b3fa57546b47cff42ee380
- SHA1
  
  bc562124b9e62158b79dfeb8bd70abfbd728e1ec
- SHA256
  
  bf8e81e0073d343bc898327003abd81f090148eee328d886c15ed4d148e07635
- SHA512
  
  29da50d9747d784d9ecc3552573e06eeb38594c3040f195d50d6336be29a009c81660e5d14089465c9c25c2c1ef19c3eff7632c5d3b7580206a0547554938206
- SSDEEP
  
  1536:VsPrAis+lYYaFMdSOkpwaVs3XEjTxRQXDbEyRCRRRoR4Rk4:OPrAis+lHaW4JvyXEjdevEy032ya4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence