General

  • Target

    c03d292ac9d57d26ed6276a08c5dff08ea0f75dac01ab1604a207d6bb08a222f

  • Size

    203KB

  • Sample

    240420-cpzvladh24

  • MD5

    b164947e6228cbd604dfc4ebd8f48965

  • SHA1

    f91aa7c4a30e1b0026ad052ffb4526f021ba9125

  • SHA256

    c03d292ac9d57d26ed6276a08c5dff08ea0f75dac01ab1604a207d6bb08a222f

  • SHA512

    0fef6c92617cb564f1d2ec2832bf8c66a0d17fdc8ebf833726025876406825157c63d335b4840ff771abf74ee5c5ac71ba23b18b0de3c1a75b670833d87e7f6e

  • SSDEEP

    6144:Uk26kf9idGkoqsVtnJfKXqPTX7D7FM6234lKm3mo8YG:Uk26W903rwtJCXqP77D7FB24lwT

Score
10/10

Malware Config

Targets

    • Target

      c03d292ac9d57d26ed6276a08c5dff08ea0f75dac01ab1604a207d6bb08a222f

    • Size

      203KB

    • MD5

      b164947e6228cbd604dfc4ebd8f48965

    • SHA1

      f91aa7c4a30e1b0026ad052ffb4526f021ba9125

    • SHA256

      c03d292ac9d57d26ed6276a08c5dff08ea0f75dac01ab1604a207d6bb08a222f

    • SHA512

      0fef6c92617cb564f1d2ec2832bf8c66a0d17fdc8ebf833726025876406825157c63d335b4840ff771abf74ee5c5ac71ba23b18b0de3c1a75b670833d87e7f6e

    • SSDEEP

      6144:Uk26kf9idGkoqsVtnJfKXqPTX7D7FM6234lKm3mo8YG:Uk26W903rwtJCXqP77D7FB24lwT

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks