e3660a39fad3cfbd92dbc145bbd0b9ff914e8e86ce774a56a9c8ccc4500575ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ad89217a9488c1cb34386c11ea199f0N.exe
Size

111KB
Sample

240906-ks623sxelh
MD5

5ad89217a9488c1cb34386c11ea199f0
SHA1

4dafef60fe465abd4ac959b3e4cb3ae1eb2841a6
SHA256

e3660a39fad3cfbd92dbc145bbd0b9ff914e8e86ce774a56a9c8ccc4500575ab
SHA512

d98898ad0b0f7764b4caaba21babdde010569dbb404327216356b639bd3bbc1ed7072dad4217b30ded4c170d71ee62c6704cd41a62e1aafec06a63c666691c58
SSDEEP

3072:EExvhlpOyzARNe9w0v0wnJcefSXQHPTTAkvB5Ddj:EylpiKvtnJfKXqPTX7DB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5ad89217a9488c1cb34386c11ea199f0N.exe
- Size
  
  111KB
- MD5
  
  5ad89217a9488c1cb34386c11ea199f0
- SHA1
  
  4dafef60fe465abd4ac959b3e4cb3ae1eb2841a6
- SHA256
  
  e3660a39fad3cfbd92dbc145bbd0b9ff914e8e86ce774a56a9c8ccc4500575ab
- SHA512
  
  d98898ad0b0f7764b4caaba21babdde010569dbb404327216356b639bd3bbc1ed7072dad4217b30ded4c170d71ee62c6704cd41a62e1aafec06a63c666691c58
- SSDEEP
  
  3072:EExvhlpOyzARNe9w0v0wnJcefSXQHPTTAkvB5Ddj:EylpiKvtnJfKXqPTX7DB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence