11268bfe0f8fd833cba169427a75f4e129b7bf9e7dcb105e7f0c9936c8f9e3cf | Triage

Sharing

General

Target

Sonar.AutoSwitch.zip
Size

24.0MB
Sample

221215-gz5wtabg77
MD5

45aa36c06afe11d5c835f056315b6e55
SHA1

8ff0600fc7fb253c0e53f3d0c6cc10068239988d
SHA256

11268bfe0f8fd833cba169427a75f4e129b7bf9e7dcb105e7f0c9936c8f9e3cf
SHA512

cf57bd04dd1de474fdae6dc15597f8ad4e419962588e1dd5d251e18b8609981ff208116dbba87d7141fabe2b90b88ac76e36cded43542504e0d71434489ff5b6
SSDEEP

393216:03j8rZPP+BKRU68ywqcnpeAVRYd8VYKvkWZp9DlDGL9bIcIwETjb+frDBPEhzL4X:gOZPZz8ocnkAVRYd8VY45ZpOL9bPIw3V

Score

10^/10

coreentity persistence

Malware Config

Targets

- Target
  
  Sonar.AutoSwitch.zip
- Size
  
  24.0MB
- MD5
  
  45aa36c06afe11d5c835f056315b6e55
- SHA1
  
  8ff0600fc7fb253c0e53f3d0c6cc10068239988d
- SHA256
  
  11268bfe0f8fd833cba169427a75f4e129b7bf9e7dcb105e7f0c9936c8f9e3cf
- SHA512
  
  cf57bd04dd1de474fdae6dc15597f8ad4e419962588e1dd5d251e18b8609981ff208116dbba87d7141fabe2b90b88ac76e36cded43542504e0d71434489ff5b6
- SSDEEP
  
  393216:03j8rZPP+BKRU68ywqcnpeAVRYd8VYKvkWZp9DlDGL9bIcIwETjb+frDBPEhzL4X:gOZPZz8ocnkAVRYd8VY45ZpOL9bPIw3V
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1