9964666e80454486f831a82f5559c12d311054f6a4f9d1e6930552138c5da59e | Triage

Sharing

General

Target

9f735d463a9852fd1fbe578649db41a0N.exe
Size

380KB
Sample

240906-dxnyqstgkc
MD5

9f735d463a9852fd1fbe578649db41a0
SHA1

b8b3783d5986cacff6b6d054223dd6c38936979c
SHA256

9964666e80454486f831a82f5559c12d311054f6a4f9d1e6930552138c5da59e
SHA512

829e3e2f7828e70003ee424300114a6e7e7e789cd352fbdb0f4808945faed5668cf9de0bce89bcb3232a0e0dd4a2217d0735135e0275f69f6fdc815ae448a7b5
SSDEEP

6144:N3m4hWYWxCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:N3hhWYLOtoq5t6NSN6G5tbt5t6NSN6T

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9f735d463a9852fd1fbe578649db41a0N.exe
- Size
  
  380KB
- MD5
  
  9f735d463a9852fd1fbe578649db41a0
- SHA1
  
  b8b3783d5986cacff6b6d054223dd6c38936979c
- SHA256
  
  9964666e80454486f831a82f5559c12d311054f6a4f9d1e6930552138c5da59e
- SHA512
  
  829e3e2f7828e70003ee424300114a6e7e7e789cd352fbdb0f4808945faed5668cf9de0bce89bcb3232a0e0dd4a2217d0735135e0275f69f6fdc815ae448a7b5
- SSDEEP
  
  6144:N3m4hWYWxCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:N3hhWYLOtoq5t6NSN6G5tbt5t6NSN6T
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence