6a80da3e3ad185905887670e7284c537dacdb622a78e0f97ac2d423e723eaf9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e5627740f95a3c1ac43980fdd0e2bc60N.exe
Size

67KB
Sample

240906-hl4x2asdpb
MD5

e5627740f95a3c1ac43980fdd0e2bc60
SHA1

4a2e6c11b89c432a6978ebe07d33d1a696dec8c1
SHA256

6a80da3e3ad185905887670e7284c537dacdb622a78e0f97ac2d423e723eaf9a
SHA512

019aecd2e8069b26ef8b0af65fba603a2c8e64f99a8edf6bf385d763f8eec0a5e957a84c4295346cd9e1d3e66877ee4c33cfff100a1140a1da3da1285619feb5
SSDEEP

1536:CJ9z0cLaQ+p08tezGLDeJs+3yq5lY/yMCkGVs8qKx1LTf11cgCe8uC:o0M3+p08tezIeJs675a/yhx1LTf1ugCV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e5627740f95a3c1ac43980fdd0e2bc60N.exe
- Size
  
  67KB
- MD5
  
  e5627740f95a3c1ac43980fdd0e2bc60
- SHA1
  
  4a2e6c11b89c432a6978ebe07d33d1a696dec8c1
- SHA256
  
  6a80da3e3ad185905887670e7284c537dacdb622a78e0f97ac2d423e723eaf9a
- SHA512
  
  019aecd2e8069b26ef8b0af65fba603a2c8e64f99a8edf6bf385d763f8eec0a5e957a84c4295346cd9e1d3e66877ee4c33cfff100a1140a1da3da1285619feb5
- SSDEEP
  
  1536:CJ9z0cLaQ+p08tezGLDeJs+3yq5lY/yMCkGVs8qKx1LTf11cgCe8uC:o0M3+p08tezIeJs675a/yhx1LTf1ugCV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence