29de9e7aabd7ff4483dccc4ea4265bbdcfa9c2f56820a5ff2104408eeb4d5b9a | Triage

Sharing

General

Target

29de9e7aabd7ff4483dccc4ea4265bbdcfa9c2f56820a5ff2104408eeb4d5b9aN.exe
Size

464KB
Sample

241122-n8mj6azpb1
MD5

c19adbdfd9b0290a320b3e083e44fcf0
SHA1

35df394b84d4bf9f6d756efd405edfd1590b42ff
SHA256

29de9e7aabd7ff4483dccc4ea4265bbdcfa9c2f56820a5ff2104408eeb4d5b9a
SHA512

2f275e284a3a907ca004bdad6e5a596175bb6e6637bb707fcc335207c4072083e7df0cbcb2776ea88a00476ebee4facab0aa8cea9f7173aa40aca8c3fc0e207e
SSDEEP

6144:PT9dfTxEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC4:PT91FEVI2C4EVu2JEVcBEVI2C4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  29de9e7aabd7ff4483dccc4ea4265bbdcfa9c2f56820a5ff2104408eeb4d5b9aN.exe
- Size
  
  464KB
- MD5
  
  c19adbdfd9b0290a320b3e083e44fcf0
- SHA1
  
  35df394b84d4bf9f6d756efd405edfd1590b42ff
- SHA256
  
  29de9e7aabd7ff4483dccc4ea4265bbdcfa9c2f56820a5ff2104408eeb4d5b9a
- SHA512
  
  2f275e284a3a907ca004bdad6e5a596175bb6e6637bb707fcc335207c4072083e7df0cbcb2776ea88a00476ebee4facab0aa8cea9f7173aa40aca8c3fc0e207e
- SSDEEP
  
  6144:PT9dfTxEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC4:PT91FEVI2C4EVu2JEVcBEVI2C4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence