204c7ea8b218b3f4b43ee77a54c1b025d0b63ec25fae32f0afa63d2023d2a134 | Triage

Sharing

General

Target

204c7ea8b218b3f4b43ee77a54c1b025d0b63ec25fae32f0afa63d2023d2a134
Size

2.7MB
Sample

240408-x1rzcacf7s
MD5

f0e33ea969c2e38cec85e6a57ddde579
SHA1

37a054a9c3e729d0d7c8dd9b8ce65ba6c8b9eb49
SHA256

204c7ea8b218b3f4b43ee77a54c1b025d0b63ec25fae32f0afa63d2023d2a134
SHA512

3c04be54546897ff1fdaa7f17d161122cc3f414ece23407edb5fd04666e17f9ca3f6a5bc17b67abf644bccf43fb98f5ca391ecae4354899ed65edde8bb2f70d6
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBW9w4Sx:+R0pI/IQlUoMPdmpSpM4

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  204c7ea8b218b3f4b43ee77a54c1b025d0b63ec25fae32f0afa63d2023d2a134
- Size
  
  2.7MB
- MD5
  
  f0e33ea969c2e38cec85e6a57ddde579
- SHA1
  
  37a054a9c3e729d0d7c8dd9b8ce65ba6c8b9eb49
- SHA256
  
  204c7ea8b218b3f4b43ee77a54c1b025d0b63ec25fae32f0afa63d2023d2a134
- SHA512
  
  3c04be54546897ff1fdaa7f17d161122cc3f414ece23407edb5fd04666e17f9ca3f6a5bc17b67abf644bccf43fb98f5ca391ecae4354899ed65edde8bb2f70d6
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBW9w4Sx:+R0pI/IQlUoMPdmpSpM4
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2