5ae49aa4f511d4129d12747915cbde1ef50c14356192afbcffe2ece5783f51d3 | Triage

Sharing

General

Target

5ae49aa4f511d4129d12747915cbde1ef50c14356192afbcffe2ece5783f51d3
Size

236KB
Sample

221129-ks2scsdf35
MD5

d74512cc0cdf49b8f480b9a42694d820
SHA1

3e447d436b73705eaf8d1e7c71a7262009a8b081
SHA256

5ae49aa4f511d4129d12747915cbde1ef50c14356192afbcffe2ece5783f51d3
SHA512

20365e06560c1ce40d7c978aef1f32ffa09da104832342b9d670dc619f8933fce7a24af7d2687464da81e241e83ad28349fbde97558e12014134584d2a1c047d
SSDEEP

1536:Iguo2K86vta10RJQYPIHL+D5IWhxRh/Ci4ucg3/+k5ltr+DRPG8Gz7wk+cQvM8:Go256vS0RJAL+lHPKi40+66iwkD0r

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  5ae49aa4f511d4129d12747915cbde1ef50c14356192afbcffe2ece5783f51d3
- Size
  
  236KB
- MD5
  
  d74512cc0cdf49b8f480b9a42694d820
- SHA1
  
  3e447d436b73705eaf8d1e7c71a7262009a8b081
- SHA256
  
  5ae49aa4f511d4129d12747915cbde1ef50c14356192afbcffe2ece5783f51d3
- SHA512
  
  20365e06560c1ce40d7c978aef1f32ffa09da104832342b9d670dc619f8933fce7a24af7d2687464da81e241e83ad28349fbde97558e12014134584d2a1c047d
- SSDEEP
  
  1536:Iguo2K86vta10RJQYPIHL+D5IWhxRh/Ci4ucg3/+k5ltr+DRPG8Gz7wk+cQvM8:Go256vS0RJAL+lHPKi40+66iwkD0r
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2