e44253c39391bb28f346dd98d874e4587a34ecec25cc920ddcf60751cd1bfdc4 | Triage

Sharing

General

Target

11832aaaea01ab2ab4f4bbef2792335a
Size

4.5MB
Sample

231224-zf4thsdeb3
MD5

11832aaaea01ab2ab4f4bbef2792335a
SHA1

b086b6796613307e4fc109f224eb9f3550e0d3b4
SHA256

e44253c39391bb28f346dd98d874e4587a34ecec25cc920ddcf60751cd1bfdc4
SHA512

76c967665ccf20bcdeda6ffab8e0f29929605c3b9e80bb24f9c25f38f3c1674932e65afba486499aac2bce8cb871bfa8a6cd56ee9e78887ac8cd113a39d50286
SSDEEP

98304:5MGf2jqPwejTT9k7lw3lgIJm1PBMckd00ZTz+LX2yC0DX:Ff2jqBTG7lw36r1PSna0ZiXD7

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  11832aaaea01ab2ab4f4bbef2792335a
- Size
  
  4.5MB
- MD5
  
  11832aaaea01ab2ab4f4bbef2792335a
- SHA1
  
  b086b6796613307e4fc109f224eb9f3550e0d3b4
- SHA256
  
  e44253c39391bb28f346dd98d874e4587a34ecec25cc920ddcf60751cd1bfdc4
- SHA512
  
  76c967665ccf20bcdeda6ffab8e0f29929605c3b9e80bb24f9c25f38f3c1674932e65afba486499aac2bce8cb871bfa8a6cd56ee9e78887ac8cd113a39d50286
- SSDEEP
  
  98304:5MGf2jqPwejTT9k7lw3lgIJm1PBMckd00ZTz+LX2yC0DX:Ff2jqBTG7lw36r1PSna0ZiXD7
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2