ba0875743307793dd306f0e964b0332b91b39d8ce6d188118cf7b0082af7eec3 | Triage

Sharing

General

Target

d6f2948148f80c2baf3cdc75b22f74b0N.exe
Size

128KB
Sample

240914-1ybq5ayfrq
MD5

d6f2948148f80c2baf3cdc75b22f74b0
SHA1

c7aa4ce35cdf91bb677ad04ad1687445b4f76397
SHA256

ba0875743307793dd306f0e964b0332b91b39d8ce6d188118cf7b0082af7eec3
SHA512

86c95a39a851ce73979c1c926cdc7bea4d2e08846b8bd51701162a14e6847e82239e8db08b3f731e397717370106986794c23e8ddc9183a84e1ef6bc4513440f
SSDEEP

3072:jHcBmHDHRpm7jiAeZQItxFU6UK7q4+5DbGTO6GQd3JSZO5b:jHdHLRpaubOIXe6UK+42GTQMJSZO5b

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d6f2948148f80c2baf3cdc75b22f74b0N.exe
- Size
  
  128KB
- MD5
  
  d6f2948148f80c2baf3cdc75b22f74b0
- SHA1
  
  c7aa4ce35cdf91bb677ad04ad1687445b4f76397
- SHA256
  
  ba0875743307793dd306f0e964b0332b91b39d8ce6d188118cf7b0082af7eec3
- SHA512
  
  86c95a39a851ce73979c1c926cdc7bea4d2e08846b8bd51701162a14e6847e82239e8db08b3f731e397717370106986794c23e8ddc9183a84e1ef6bc4513440f
- SSDEEP
  
  3072:jHcBmHDHRpm7jiAeZQItxFU6UK7q4+5DbGTO6GQd3JSZO5b:jHdHLRpaubOIXe6UK+42GTQMJSZO5b
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence