2313dcbc8a36c0617aa65e302482ad8cdcd304ce910e446aa0a7eaa4604a9f79 | Triage

Sharing

General

Target

cd00349df2c1142580532c1b3e9074d0N.exe
Size

552KB
Sample

240906-b3al7azcra
MD5

cd00349df2c1142580532c1b3e9074d0
SHA1

c6d9aad9b879cd39f456626e5263796885641ad5
SHA256

2313dcbc8a36c0617aa65e302482ad8cdcd304ce910e446aa0a7eaa4604a9f79
SHA512

0587cf3de303b8a35f07b8c86ff78af94464157acb4ad773b5b51a7ddbd04d2d97b49547b75ecfa625658cdd530b7f6405a23becbb4a1c4ad4d389b5bffee9c9
SSDEEP

6144:wIkffP98SeNpgdyuH1lZfRo0V8JcgE+ezpg1xrloBNTNxaaqX:wIkfN87g7/VycgE81lgxaa8

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  cd00349df2c1142580532c1b3e9074d0N.exe
- Size
  
  552KB
- MD5
  
  cd00349df2c1142580532c1b3e9074d0
- SHA1
  
  c6d9aad9b879cd39f456626e5263796885641ad5
- SHA256
  
  2313dcbc8a36c0617aa65e302482ad8cdcd304ce910e446aa0a7eaa4604a9f79
- SHA512
  
  0587cf3de303b8a35f07b8c86ff78af94464157acb4ad773b5b51a7ddbd04d2d97b49547b75ecfa625658cdd530b7f6405a23becbb4a1c4ad4d389b5bffee9c9
- SSDEEP
  
  6144:wIkffP98SeNpgdyuH1lZfRo0V8JcgE+ezpg1xrloBNTNxaaqX:wIkfN87g7/VycgE81lgxaa8
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence