9769ddf6492a76f981dbe56b33e7d3bd57cca40fe2acf664aa01c822c32dc678 | Triage

Sharing

General

Target

c0859302406bc82c651964976b270e80N.exe
Size

128KB
Sample

240914-rq3p7syblp
MD5

c0859302406bc82c651964976b270e80
SHA1

f108d8d378302e10f7ebd122f2ad921a5274bad5
SHA256

9769ddf6492a76f981dbe56b33e7d3bd57cca40fe2acf664aa01c822c32dc678
SHA512

b9f6d3a80bea10b5ed235c14d4741831e87b967e1aa5de96fd82b343bd8aaa260766cf8367c72e03a78994eccbaa1818246fd500019af1640b97e30285907048
SSDEEP

3072:rq3l/Lqi9HeYw0v0wnJcefSXQHPTTAkvB5DdcgFM9o:r4Lqi9+mtnJfKXqPTX7D7FMm

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c0859302406bc82c651964976b270e80N.exe
- Size
  
  128KB
- MD5
  
  c0859302406bc82c651964976b270e80
- SHA1
  
  f108d8d378302e10f7ebd122f2ad921a5274bad5
- SHA256
  
  9769ddf6492a76f981dbe56b33e7d3bd57cca40fe2acf664aa01c822c32dc678
- SHA512
  
  b9f6d3a80bea10b5ed235c14d4741831e87b967e1aa5de96fd82b343bd8aaa260766cf8367c72e03a78994eccbaa1818246fd500019af1640b97e30285907048
- SSDEEP
  
  3072:rq3l/Lqi9HeYw0v0wnJcefSXQHPTTAkvB5DdcgFM9o:r4Lqi9+mtnJfKXqPTX7D7FMm
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence