ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8 | Triage

Sharing

General

Target

ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8
Size

104KB
Sample

240313-3gfpvsef86
MD5

f2fdaf5d4cdf2933ca0f5f82496b109b
SHA1

dd75040d87d4957288e760696b6afbecc49d9d4e
SHA256

ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8
SHA512

71d9aa5a5c3425a2d32adfd96beeec2fea446c0a9fcb390742698a153ae4bd9ee7922eb5838afc572a71c568054f2a0d2da5208aee15b634608cb3df4f0782be
SSDEEP

3072:zlw0aMmJN+pI4ZN4UiJe5Hx7cEGrhkngpDvchkqbAIQ:ZIH+pIM5Hx4brq2Ah

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8
- Size
  
  104KB
- MD5
  
  f2fdaf5d4cdf2933ca0f5f82496b109b
- SHA1
  
  dd75040d87d4957288e760696b6afbecc49d9d4e
- SHA256
  
  ceb6999177a08983e7b20a2b5065bf7ba6238c7e9531807f66016808d4ce22f8
- SHA512
  
  71d9aa5a5c3425a2d32adfd96beeec2fea446c0a9fcb390742698a153ae4bd9ee7922eb5838afc572a71c568054f2a0d2da5208aee15b634608cb3df4f0782be
- SSDEEP
  
  3072:zlw0aMmJN+pI4ZN4UiJe5Hx7cEGrhkngpDvchkqbAIQ:ZIH+pIM5Hx4brq2Ah
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2