e836e80f43a894ecaf63b916f1f901700ce503825e4b5d6b98862fb604a78d21 | Triage

Sharing

General

Target

e836e80f43a894ecaf63b916f1f901700ce503825e4b5d6b98862fb604a78d21
Size

77KB
Sample

240908-d5fbkatdnm
MD5

d55a460cd8f8006c828f6407e970db87
SHA1

975c1b003efce094784a7eda24129c99b71cd1c4
SHA256

e836e80f43a894ecaf63b916f1f901700ce503825e4b5d6b98862fb604a78d21
SHA512

67a7f4a4e6da781ef69b4e1d41b97bb382219f896f59da6816e944b934c387b736b3fd1a65f22e9c5d88e4293ef383636942ddaae00470a5512a52f61377d6d4
SSDEEP

1536:IWS8lO1y3B0Lv/mRT7lF2LtI3wfi+TjRC/:88I1y3iLnmz2owf1TjY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e836e80f43a894ecaf63b916f1f901700ce503825e4b5d6b98862fb604a78d21
- Size
  
  77KB
- MD5
  
  d55a460cd8f8006c828f6407e970db87
- SHA1
  
  975c1b003efce094784a7eda24129c99b71cd1c4
- SHA256
  
  e836e80f43a894ecaf63b916f1f901700ce503825e4b5d6b98862fb604a78d21
- SHA512
  
  67a7f4a4e6da781ef69b4e1d41b97bb382219f896f59da6816e944b934c387b736b3fd1a65f22e9c5d88e4293ef383636942ddaae00470a5512a52f61377d6d4
- SSDEEP
  
  1536:IWS8lO1y3B0Lv/mRT7lF2LtI3wfi+TjRC/:88I1y3iLnmz2owf1TjY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence