6bafa976ddd1561a4caa99a2eaa0aedf51734df16e097943ed8f3efe6b042d16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a575a1b45141fd20d0eb57b5b60e8f40N.exe
Size

60KB
Sample

240906-fte8jaybnb
MD5

a575a1b45141fd20d0eb57b5b60e8f40
SHA1

fd0994a839375d9d40884612169c8d2e3202b97b
SHA256

6bafa976ddd1561a4caa99a2eaa0aedf51734df16e097943ed8f3efe6b042d16
SHA512

c5f150a78b36f97e5fa3ba28c67e4d70ccce086c3e318d38ce09963595537ec5064f1cef5d377231937acb1ef1b493c52a1149e92ae97a5aedd84590beb43158
SSDEEP

1536:D2gQ4Rl+5FL36+aX1VLcAqq89c3NB86l1r:agQ4OTLo1Ec9B86l1r

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a575a1b45141fd20d0eb57b5b60e8f40N.exe
- Size
  
  60KB
- MD5
  
  a575a1b45141fd20d0eb57b5b60e8f40
- SHA1
  
  fd0994a839375d9d40884612169c8d2e3202b97b
- SHA256
  
  6bafa976ddd1561a4caa99a2eaa0aedf51734df16e097943ed8f3efe6b042d16
- SHA512
  
  c5f150a78b36f97e5fa3ba28c67e4d70ccce086c3e318d38ce09963595537ec5064f1cef5d377231937acb1ef1b493c52a1149e92ae97a5aedd84590beb43158
- SSDEEP
  
  1536:D2gQ4Rl+5FL36+aX1VLcAqq89c3NB86l1r:agQ4OTLo1Ec9B86l1r
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence