8ebae6da940c33f71c7c75d784891d28bb1efc84804fc4ab85a11d54bc4b6979 | Triage

Sharing

General

Target

dcf3dff870d1fbf8f373608c2a0594e0N.exe
Size

402KB
Sample

240906-j2f2ksvgrj
MD5

dcf3dff870d1fbf8f373608c2a0594e0
SHA1

a3befdbdbd0b0edba514e5b9fc69fa5e396b009c
SHA256

8ebae6da940c33f71c7c75d784891d28bb1efc84804fc4ab85a11d54bc4b6979
SHA512

8b8f46f9cb5c9c9f7ba1449b83226f7ed7445654f73933be3e529fa81f41b24eb84661a38e09ba6cc2487ace242e376b1e27f2594b5085b830fd0612726c90e0
SSDEEP

6144:Kru7MiDcpsPvTpN0xHuwdkAj51VezfHZ3neNZpGkXo+TCCYOs5PHdC:Kru7MiDciU

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  dcf3dff870d1fbf8f373608c2a0594e0N.exe
- Size
  
  402KB
- MD5
  
  dcf3dff870d1fbf8f373608c2a0594e0
- SHA1
  
  a3befdbdbd0b0edba514e5b9fc69fa5e396b009c
- SHA256
  
  8ebae6da940c33f71c7c75d784891d28bb1efc84804fc4ab85a11d54bc4b6979
- SHA512
  
  8b8f46f9cb5c9c9f7ba1449b83226f7ed7445654f73933be3e529fa81f41b24eb84661a38e09ba6cc2487ace242e376b1e27f2594b5085b830fd0612726c90e0
- SSDEEP
  
  6144:Kru7MiDcpsPvTpN0xHuwdkAj51VezfHZ3neNZpGkXo+TCCYOs5PHdC:Kru7MiDciU
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence