f8ed14f3a24c9bb46e340d21e72f34568d5f8b1178e760c902c9bdb7d1e56483 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db551a164cd137ea35970cd6965cebb0N.exe
Size

93KB
Sample

240907-n5aq7atapq
MD5

db551a164cd137ea35970cd6965cebb0
SHA1

1749b2a49c70539ad3280a7a58912dcc6b25a090
SHA256

f8ed14f3a24c9bb46e340d21e72f34568d5f8b1178e760c902c9bdb7d1e56483
SHA512

14012dfa698503b9e58b1206471863937c7b16727c22097bdbe40b036377c2f8af90e2b22747ba1615649ef40a245eb24bd32223d25d1bae39211562a2ce98bd
SSDEEP

1536:pOyngCkRJ75Tq4VG9Fdh/pL9pJf3/wWpIzm0DMY8lBg5VsaMiwihtIbbpkp:pOygpJ75TlW9pdvw2Izm0DMzw5VdMiwC

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  db551a164cd137ea35970cd6965cebb0N.exe
- Size
  
  93KB
- MD5
  
  db551a164cd137ea35970cd6965cebb0
- SHA1
  
  1749b2a49c70539ad3280a7a58912dcc6b25a090
- SHA256
  
  f8ed14f3a24c9bb46e340d21e72f34568d5f8b1178e760c902c9bdb7d1e56483
- SHA512
  
  14012dfa698503b9e58b1206471863937c7b16727c22097bdbe40b036377c2f8af90e2b22747ba1615649ef40a245eb24bd32223d25d1bae39211562a2ce98bd
- SSDEEP
  
  1536:pOyngCkRJ75Tq4VG9Fdh/pL9pJf3/wWpIzm0DMY8lBg5VsaMiwihtIbbpkp:pOygpJ75TlW9pdvw2Izm0DMzw5VdMiwC
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence