4cf4832f14c3bdd26c840c45135e569ec45bd6c0c9d4e5d0a77afbbaf04383e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8492727e0348c08dd921a7c422a4fa10N.exe
Size

96KB
Sample

240909-wpl4aatfpb
MD5

8492727e0348c08dd921a7c422a4fa10
SHA1

e64e24fa904b15b18084547a09fa1761dbcfeb79
SHA256

4cf4832f14c3bdd26c840c45135e569ec45bd6c0c9d4e5d0a77afbbaf04383e3
SHA512

d0237d0c888bbf93ed6c37992983eb211e5dcb07564cda1deb3c69ebf7bc6bc1eb2afca66840227c54cb9c611ad9ffecdfe19e99d4abad6ddf71609631acef32
SSDEEP

1536:+uX3Q3D4/LKoTg/dAFHTE1p1FU351qIq0+jYnnnbUM7Ujz0cZ44E:+uX3QE/tOdAxTE/1+1qI6UnnnbU8li/E

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8492727e0348c08dd921a7c422a4fa10N.exe
- Size
  
  96KB
- MD5
  
  8492727e0348c08dd921a7c422a4fa10
- SHA1
  
  e64e24fa904b15b18084547a09fa1761dbcfeb79
- SHA256
  
  4cf4832f14c3bdd26c840c45135e569ec45bd6c0c9d4e5d0a77afbbaf04383e3
- SHA512
  
  d0237d0c888bbf93ed6c37992983eb211e5dcb07564cda1deb3c69ebf7bc6bc1eb2afca66840227c54cb9c611ad9ffecdfe19e99d4abad6ddf71609631acef32
- SSDEEP
  
  1536:+uX3Q3D4/LKoTg/dAFHTE1p1FU351qIq0+jYnnnbUM7Ujz0cZ44E:+uX3QE/tOdAxTE/1+1qI6UnnnbU8li/E
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence