b8d40ca1053a5f95ce2083fc03f67d2383190e9ec6fa1d974ae3592ba95f507a | Triage

Sharing

General

Target

cc3698cd1a78f0d3ab620f9aeb4c31d0N.exe
Size

100KB
Sample

240907-dh9a5a1gqj
MD5

cc3698cd1a78f0d3ab620f9aeb4c31d0
SHA1

f0067f5f89aa766d03c6f733f246f05df46ceb25
SHA256

b8d40ca1053a5f95ce2083fc03f67d2383190e9ec6fa1d974ae3592ba95f507a
SHA512

365e70a65eb761ae91d90137ab8ba15e6e2d69afbb6349c6d6954c667d72bbd0e25e5cd62f652efbccaf1b7551b12b44c9682fee9ad031fec925390cf7f06481
SSDEEP

1536:E4Okn8VHPRctsmB5mKu9rxZYJ928jmq1GPygnUonpRzT:E1knIHPutssPu9rxY2UmlyIUoz

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  cc3698cd1a78f0d3ab620f9aeb4c31d0N.exe
- Size
  
  100KB
- MD5
  
  cc3698cd1a78f0d3ab620f9aeb4c31d0
- SHA1
  
  f0067f5f89aa766d03c6f733f246f05df46ceb25
- SHA256
  
  b8d40ca1053a5f95ce2083fc03f67d2383190e9ec6fa1d974ae3592ba95f507a
- SHA512
  
  365e70a65eb761ae91d90137ab8ba15e6e2d69afbb6349c6d6954c667d72bbd0e25e5cd62f652efbccaf1b7551b12b44c9682fee9ad031fec925390cf7f06481
- SSDEEP
  
  1536:E4Okn8VHPRctsmB5mKu9rxZYJ928jmq1GPygnUonpRzT:E1knIHPutssPu9rxY2UmlyIUoz
Score

8^/10

discovery persistence privilege_escalation
- Event Triggered Execution: AppInit DLLs
  Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
  persistence privilege_escalation
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

AppInit DLLs

Privilege Escalation

Event Triggered Execution

AppInit DLLs

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2

discoverypersistenceprivilege_escalation