4d0df4bf09bee4c96f7753ce84bb668fb20b53f024ff509994443ebb8ebf2354 | Triage

Sharing

General

Target

df32f6236be406137b914263f5bd4fb4_JC.exe
Size

197KB
Sample

231012-bs2ypaff5y
MD5

df32f6236be406137b914263f5bd4fb4
SHA1

237f90d91940273546442b131b8f5b5f4ec798f5
SHA256

4d0df4bf09bee4c96f7753ce84bb668fb20b53f024ff509994443ebb8ebf2354
SHA512

7ae1df1e8033b163b71c7273b912bf2315e0d6890479046fcc045356fa81badc1866b0315052d0ce8ac29b0b39bfaad511adc5ee9d5569ed10b45dcf5be95228
SSDEEP

6144:zKpiaX85ovJ1BA42g4fQkjxqvak+PH/RARMHGb3fJt4X:zKph8QJ1Bp74IyxqCfRARR6

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  df32f6236be406137b914263f5bd4fb4_JC.exe
- Size
  
  197KB
- MD5
  
  df32f6236be406137b914263f5bd4fb4
- SHA1
  
  237f90d91940273546442b131b8f5b5f4ec798f5
- SHA256
  
  4d0df4bf09bee4c96f7753ce84bb668fb20b53f024ff509994443ebb8ebf2354
- SHA512
  
  7ae1df1e8033b163b71c7273b912bf2315e0d6890479046fcc045356fa81badc1866b0315052d0ce8ac29b0b39bfaad511adc5ee9d5569ed10b45dcf5be95228
- SSDEEP
  
  6144:zKpiaX85ovJ1BA42g4fQkjxqvak+PH/RARMHGb3fJt4X:zKph8QJ1Bp74IyxqCfRARR6
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2