c5048cdf0d3ecf63df9d188a4a2b0fb8ba74418eff2a5de37dbba24773b24a0d | Triage

Sharing

General

Target

c5048cdf0d3ecf63df9d188a4a2b0fb8ba74418eff2a5de37dbba24773b24a0d
Size

484KB
Sample

240419-c817rsff4v
MD5

1bb549befd5ead3d71c5b69b495348d5
SHA1

fe3f1253744c66cf225dcd1d5b8457fd6b2c9b52
SHA256

c5048cdf0d3ecf63df9d188a4a2b0fb8ba74418eff2a5de37dbba24773b24a0d
SHA512

e0fa06d0b1ff83cc8324a4a727f93c04dc7886a1f9061eb4f8b6cfac54e62598c989b51b7138a3c25645adf8d47db4bbd3c166352e7f9df2dd195f9f45347510
SSDEEP

12288:ILPkCDt1EG2XVekhdeTmoPM1bjGvJC3sxupWho8wZY:ILPkQ1bqAY1ev4+Q

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  c5048cdf0d3ecf63df9d188a4a2b0fb8ba74418eff2a5de37dbba24773b24a0d
- Size
  
  484KB
- MD5
  
  1bb549befd5ead3d71c5b69b495348d5
- SHA1
  
  fe3f1253744c66cf225dcd1d5b8457fd6b2c9b52
- SHA256
  
  c5048cdf0d3ecf63df9d188a4a2b0fb8ba74418eff2a5de37dbba24773b24a0d
- SHA512
  
  e0fa06d0b1ff83cc8324a4a727f93c04dc7886a1f9061eb4f8b6cfac54e62598c989b51b7138a3c25645adf8d47db4bbd3c166352e7f9df2dd195f9f45347510
- SSDEEP
  
  12288:ILPkCDt1EG2XVekhdeTmoPM1bjGvJC3sxupWho8wZY:ILPkQ1bqAY1ev4+Q
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2