c266c7478056112542113a167ab78753e9e73dc0d273150e6dbb279d328a186d | Triage

Sharing

General

Target

656df8c44d67ce51bcb17f6afb5de3f8
Size

217KB
Sample

231226-lyvrnsbehn
MD5

656df8c44d67ce51bcb17f6afb5de3f8
SHA1

0c09b7c71ec6177d187162d7a77a84631a4cdee0
SHA256

c266c7478056112542113a167ab78753e9e73dc0d273150e6dbb279d328a186d
SHA512

c3bd05337fd15553112d4a8cd1e985c72a1a4072f9387a07e841796b00f898d35dc4549c23fbd1096d1a22c2959b3497784cc5e7741107cbb76e96b5358c262d
SSDEEP

6144:vOJfFOCTyGmvaRu39kXIVw2xQkkqh5eYqGGLTsfOn:mJcCTyqLXxkkOHqBsOn

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  656df8c44d67ce51bcb17f6afb5de3f8
- Size
  
  217KB
- MD5
  
  656df8c44d67ce51bcb17f6afb5de3f8
- SHA1
  
  0c09b7c71ec6177d187162d7a77a84631a4cdee0
- SHA256
  
  c266c7478056112542113a167ab78753e9e73dc0d273150e6dbb279d328a186d
- SHA512
  
  c3bd05337fd15553112d4a8cd1e985c72a1a4072f9387a07e841796b00f898d35dc4549c23fbd1096d1a22c2959b3497784cc5e7741107cbb76e96b5358c262d
- SSDEEP
  
  6144:vOJfFOCTyGmvaRu39kXIVw2xQkkqh5eYqGGLTsfOn:mJcCTyqLXxkkOHqBsOn
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2