24761ed58e91089601df6c6d9e3c5a8b3cd0b2fc7cbb5ff612ab8a3499c218fc | Triage

Sharing

General

Target

24761ed58e91089601df6c6d9e3c5a8b3cd0b2fc7cbb5ff612ab8a3499c218fc
Size

486KB
Sample

240309-z7xjhsbc8x
MD5

b4f36542893c279919704e4cecab18a4
SHA1

9a64584fa10222235468511afa5c412ea02dd50b
SHA256

24761ed58e91089601df6c6d9e3c5a8b3cd0b2fc7cbb5ff612ab8a3499c218fc
SHA512

ec503111900e82c7d05de7483f0701163cc51c13a2a46eea9ab2dccc2be7cf624a19f53b35cdd2eb7b176ccc8c4890d8c0a613b645b65f6ef0eec52aa4c476f4
SSDEEP

12288:hQlc87eqqV5e+wBV6O+eGDRkR9qr7nIRjZim5:hQSqqHeVBxQ89qrreVim5

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  24761ed58e91089601df6c6d9e3c5a8b3cd0b2fc7cbb5ff612ab8a3499c218fc
- Size
  
  486KB
- MD5
  
  b4f36542893c279919704e4cecab18a4
- SHA1
  
  9a64584fa10222235468511afa5c412ea02dd50b
- SHA256
  
  24761ed58e91089601df6c6d9e3c5a8b3cd0b2fc7cbb5ff612ab8a3499c218fc
- SHA512
  
  ec503111900e82c7d05de7483f0701163cc51c13a2a46eea9ab2dccc2be7cf624a19f53b35cdd2eb7b176ccc8c4890d8c0a613b645b65f6ef0eec52aa4c476f4
- SSDEEP
  
  12288:hQlc87eqqV5e+wBV6O+eGDRkR9qr7nIRjZim5:hQSqqHeVBxQ89qrreVim5
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2