56392446312028e4cf1d6143757d638ab0c3a0a263ecabff06641fa677dd7bf8 | Triage

Sharing

General

Target

480c335a80987545996c55f91ee12570N.exe
Size

64KB
Sample

240911-rheneavenb
MD5

480c335a80987545996c55f91ee12570
SHA1

89be7083d6fb57c2615f909a09e9a6a2f6a42e60
SHA256

56392446312028e4cf1d6143757d638ab0c3a0a263ecabff06641fa677dd7bf8
SHA512

3a75baccc41a7f7398223443ef2dcaf021ab59d876a78aeaf2907adb3f32e256f3627ad88281e475baa2f79c3ce48c7ab5f991dfed3c2864d7cca2ca2b24373c
SSDEEP

1536:P/1a+aWG4g6fsY4KvaCnH7WScdbex2LcCYrum8SPE:llbGqpvB7v4ZcVT8SE

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  480c335a80987545996c55f91ee12570N.exe
- Size
  
  64KB
- MD5
  
  480c335a80987545996c55f91ee12570
- SHA1
  
  89be7083d6fb57c2615f909a09e9a6a2f6a42e60
- SHA256
  
  56392446312028e4cf1d6143757d638ab0c3a0a263ecabff06641fa677dd7bf8
- SHA512
  
  3a75baccc41a7f7398223443ef2dcaf021ab59d876a78aeaf2907adb3f32e256f3627ad88281e475baa2f79c3ce48c7ab5f991dfed3c2864d7cca2ca2b24373c
- SSDEEP
  
  1536:P/1a+aWG4g6fsY4KvaCnH7WScdbex2LcCYrum8SPE:llbGqpvB7v4ZcVT8SE
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence