2c5d33f729009f4c806a1a0bdb05df3e86fd568038cc098bcabd4d10dc3940fe | Triage

Sharing

General

Target

2c5d33f729009f4c806a1a0bdb05df3e86fd568038cc098bcabd4d10dc3940feN.exe
Size

320KB
Sample

241119-xrj75svphq
MD5

f1ccfd33f675fdad0dc9506c5ff261f0
SHA1

1c4c5b351faa4692f9b30ad3e2737aca0b7b4469
SHA256

2c5d33f729009f4c806a1a0bdb05df3e86fd568038cc098bcabd4d10dc3940fe
SHA512

f6ae6767a228cb88ebc77964f4320009b2772c7e6afb558c1ac9489a35d71bedde5ed63e6fca1a2ea051631735fcaaa42678bd4a2f5d4bdf27d778b1cf35f9c7
SSDEEP

6144:nVjpRsVQ///NR5fLvQ///NREQ///NR5fLYG3eujj:Sw/Nq/NZ/NcZq

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2c5d33f729009f4c806a1a0bdb05df3e86fd568038cc098bcabd4d10dc3940feN.exe
- Size
  
  320KB
- MD5
  
  f1ccfd33f675fdad0dc9506c5ff261f0
- SHA1
  
  1c4c5b351faa4692f9b30ad3e2737aca0b7b4469
- SHA256
  
  2c5d33f729009f4c806a1a0bdb05df3e86fd568038cc098bcabd4d10dc3940fe
- SHA512
  
  f6ae6767a228cb88ebc77964f4320009b2772c7e6afb558c1ac9489a35d71bedde5ed63e6fca1a2ea051631735fcaaa42678bd4a2f5d4bdf27d778b1cf35f9c7
- SSDEEP
  
  6144:nVjpRsVQ///NR5fLvQ///NREQ///NR5fLYG3eujj:Sw/Nq/NZ/NcZq
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence