e9ab261cab626457d6590269a137c8f2eb5b3c2068cf4fe7567838bd5875afe0 | Triage

Sharing

General

Target

e9ab261cab626457d6590269a137c8f2eb5b3c2068cf4fe7567838bd5875afe0.exe
Size

285KB
Sample

240908-qr2c4a1brc
MD5

080a69ac9b4f29db7090140367128962
SHA1

05bff22a7078a8ae47806aa5e5129545545f0ea2
SHA256

e9ab261cab626457d6590269a137c8f2eb5b3c2068cf4fe7567838bd5875afe0
SHA512

f428d6345a63ea2a17d6f883e13d2de737fe68fc47adcabec6c229cb8730832cc1a9236b8f745f025164589d02003b494f9bc42aa81617466fc4cc10a8a7f135
SSDEEP

3072:5RbqMQjMqqW8pMfToXQjPWepKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:LqMGMjWdlpKQIoi7tWa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e9ab261cab626457d6590269a137c8f2eb5b3c2068cf4fe7567838bd5875afe0.exe
- Size
  
  285KB
- MD5
  
  080a69ac9b4f29db7090140367128962
- SHA1
  
  05bff22a7078a8ae47806aa5e5129545545f0ea2
- SHA256
  
  e9ab261cab626457d6590269a137c8f2eb5b3c2068cf4fe7567838bd5875afe0
- SHA512
  
  f428d6345a63ea2a17d6f883e13d2de737fe68fc47adcabec6c229cb8730832cc1a9236b8f745f025164589d02003b494f9bc42aa81617466fc4cc10a8a7f135
- SSDEEP
  
  3072:5RbqMQjMqqW8pMfToXQjPWepKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:LqMGMjWdlpKQIoi7tWa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence