9b13cc552ba19e923109b73505a329dfd0342b9da519f87ea39a8b6d36ec1c61 | Triage

Sharing

General

Target

d2fe2cf20b75638113d6be92d62ff7d0N.exe
Size

95KB
Sample

240907-l378kaydnh
MD5

d2fe2cf20b75638113d6be92d62ff7d0
SHA1

6b8e655cc017ad5b5930a58bc96ca60b4321180b
SHA256

9b13cc552ba19e923109b73505a329dfd0342b9da519f87ea39a8b6d36ec1c61
SHA512

35b97cb65cf7e803b67a558b28aaf17bb671f698841f38432d63592cd3f8a59c9655f9afd367d8273cac4b2fb88f5e7b26087e090f60efc9c9aa529db090e3bb
SSDEEP

1536:dFBiqydDWjdQ/fY17Eyr2HdS9H5QFpjGYu5//H7pOM6bOLXi8PmCofGV:nYedvr2HdQsjsnH9DrLXfzoeV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d2fe2cf20b75638113d6be92d62ff7d0N.exe
- Size
  
  95KB
- MD5
  
  d2fe2cf20b75638113d6be92d62ff7d0
- SHA1
  
  6b8e655cc017ad5b5930a58bc96ca60b4321180b
- SHA256
  
  9b13cc552ba19e923109b73505a329dfd0342b9da519f87ea39a8b6d36ec1c61
- SHA512
  
  35b97cb65cf7e803b67a558b28aaf17bb671f698841f38432d63592cd3f8a59c9655f9afd367d8273cac4b2fb88f5e7b26087e090f60efc9c9aa529db090e3bb
- SSDEEP
  
  1536:dFBiqydDWjdQ/fY17Eyr2HdS9H5QFpjGYu5//H7pOM6bOLXi8PmCofGV:nYedvr2HdQsjsnH9DrLXfzoeV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence