df80ecea6c056444db0f4e1ddc520188a897601e55027ccc43eacc78a4407ecd | Triage

Sharing

General

Target

df80ecea6c056444db0f4e1ddc520188a897601e55027ccc43eacc78a4407ecd
Size

391KB
Sample

240311-bprnjsgh2w
MD5

adf83cca2775a1d7c4097ae011eed773
SHA1

c3e0f1805535d4e6a3c9ce8d3bf001d01ecb94cb
SHA256

df80ecea6c056444db0f4e1ddc520188a897601e55027ccc43eacc78a4407ecd
SHA512

55f5ecf5f918f91904c2fa579ad5fd4bb1d159d08e3ec49e1070f4df34d8ed100e0ca78229d832a4d96e5d08aa6aae17db9e2c2f99863b6f1b3accb68099f140
SSDEEP

6144:DoGjeBEEn0W8aAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:7jXmNtuhUNP3cOK3

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  df80ecea6c056444db0f4e1ddc520188a897601e55027ccc43eacc78a4407ecd
- Size
  
  391KB
- MD5
  
  adf83cca2775a1d7c4097ae011eed773
- SHA1
  
  c3e0f1805535d4e6a3c9ce8d3bf001d01ecb94cb
- SHA256
  
  df80ecea6c056444db0f4e1ddc520188a897601e55027ccc43eacc78a4407ecd
- SHA512
  
  55f5ecf5f918f91904c2fa579ad5fd4bb1d159d08e3ec49e1070f4df34d8ed100e0ca78229d832a4d96e5d08aa6aae17db9e2c2f99863b6f1b3accb68099f140
- SSDEEP
  
  6144:DoGjeBEEn0W8aAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:7jXmNtuhUNP3cOK3
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2