5ab310321be0c87a8f997f2d2583bc3648bf94de1c4f1faf9552a4cf6dcb8ad8 | Triage

Sharing

General

Target

885e7de3059fac50df11e0146d908fd0N.exe
Size

104KB
Sample

240907-g8jd6szajr
MD5

885e7de3059fac50df11e0146d908fd0
SHA1

a73c06a2fc4556ed1a2515fa64e293012e068245
SHA256

5ab310321be0c87a8f997f2d2583bc3648bf94de1c4f1faf9552a4cf6dcb8ad8
SHA512

c8069f6c2cbed582a129128f55ef7db48fb6e5aaac01f115059bd1960cc978d8c1614c13e564864673362f6716d8a7cc9067c26a3b2748f7b33631ac81020566
SSDEEP

3072:RjQzxq1n6P5DsXrFe5gx7cEGrhkngpDvchkqbAIQS:yz81nci7o5gx4brq2Ahn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  885e7de3059fac50df11e0146d908fd0N.exe
- Size
  
  104KB
- MD5
  
  885e7de3059fac50df11e0146d908fd0
- SHA1
  
  a73c06a2fc4556ed1a2515fa64e293012e068245
- SHA256
  
  5ab310321be0c87a8f997f2d2583bc3648bf94de1c4f1faf9552a4cf6dcb8ad8
- SHA512
  
  c8069f6c2cbed582a129128f55ef7db48fb6e5aaac01f115059bd1960cc978d8c1614c13e564864673362f6716d8a7cc9067c26a3b2748f7b33631ac81020566
- SSDEEP
  
  3072:RjQzxq1n6P5DsXrFe5gx7cEGrhkngpDvchkqbAIQS:yz81nci7o5gx4brq2Ahn
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence