a17292f9ff347da432675ee0a72e73e8effdaddd1cd02aaa3f8376f0998a95d4 | Triage

Sharing

General

Target

fa2efd5353852e3e7300979cbe990850N.exe
Size

1020KB
Sample

240907-a964aswgmd
MD5

fa2efd5353852e3e7300979cbe990850
SHA1

bddf455d8b2e59de7fbf476da8fede19b980ff07
SHA256

a17292f9ff347da432675ee0a72e73e8effdaddd1cd02aaa3f8376f0998a95d4
SHA512

3605fc90ee028190d08a68933fbc0fa8378f74df3bc2f7a1775706ac0d161f8f78a1c82c31619bf0ed14cbffd0a0cffe9022d96d5a97538249928a1e72f4b059
SSDEEP

6144:erYjLhehzXjOYpui6yYPaIGckpyWO63t5YNpui6yYP7u7R5Zk:erWVCzXjOYpV6yYPI3cpV6yYPd

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fa2efd5353852e3e7300979cbe990850N.exe
- Size
  
  1020KB
- MD5
  
  fa2efd5353852e3e7300979cbe990850
- SHA1
  
  bddf455d8b2e59de7fbf476da8fede19b980ff07
- SHA256
  
  a17292f9ff347da432675ee0a72e73e8effdaddd1cd02aaa3f8376f0998a95d4
- SHA512
  
  3605fc90ee028190d08a68933fbc0fa8378f74df3bc2f7a1775706ac0d161f8f78a1c82c31619bf0ed14cbffd0a0cffe9022d96d5a97538249928a1e72f4b059
- SSDEEP
  
  6144:erYjLhehzXjOYpui6yYPaIGckpyWO63t5YNpui6yYP7u7R5Zk:erWVCzXjOYpV6yYPI3cpV6yYPd
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence