285c71948d3688984f1cc68218a9eda0468c61b8a99a60266278a72dbc3968db | Triage

Sharing

General

Target

c55a94a57b718d42035c815c856c4f00N.exe
Size

144KB
Sample

240911-wz5ndawcmh
MD5

c55a94a57b718d42035c815c856c4f00
SHA1

9203c1232d6aded98c1d426f67732e12202fa584
SHA256

285c71948d3688984f1cc68218a9eda0468c61b8a99a60266278a72dbc3968db
SHA512

bd09640421c7b91c8ac112db8ce3d322e081df36aaed3119be8cba3fe85a9954c6cafdaee0048ba45bcf48d52fa1fbc4f8831610c24923c579c34c6eb874474b
SSDEEP

3072:skkre4jXWvSK7grXDv8xo/qKfomlpzdH13+EE+RaZ6r+GDZnBcV8:R8XD0xoqKfomlpzd5IF6rfBBcV8

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c55a94a57b718d42035c815c856c4f00N.exe
- Size
  
  144KB
- MD5
  
  c55a94a57b718d42035c815c856c4f00
- SHA1
  
  9203c1232d6aded98c1d426f67732e12202fa584
- SHA256
  
  285c71948d3688984f1cc68218a9eda0468c61b8a99a60266278a72dbc3968db
- SHA512
  
  bd09640421c7b91c8ac112db8ce3d322e081df36aaed3119be8cba3fe85a9954c6cafdaee0048ba45bcf48d52fa1fbc4f8831610c24923c579c34c6eb874474b
- SSDEEP
  
  3072:skkre4jXWvSK7grXDv8xo/qKfomlpzdH13+EE+RaZ6r+GDZnBcV8:R8XD0xoqKfomlpzd5IF6rfBBcV8
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence