fa65f25e7235e58d10cabffc550a6b9c6d3022ee2b52dd70da29d81cab29ee96 | Triage

Sharing

General

Target

fa65f25e7235e58d10cabffc550a6b9c6d3022ee2b52dd70da29d81cab29ee96
Size

1.3MB
Sample

240425-f55ybsga74
MD5

b4061597385844e732b1b6071a2a31cd
SHA1

28c1ef60419268e82d27f5354aaf9cd82293dd57
SHA256

fa65f25e7235e58d10cabffc550a6b9c6d3022ee2b52dd70da29d81cab29ee96
SHA512

0aef05258672c92c49994a54883ab98971ccbaf59faddd520f1a627af82bb926b96b2d44f410fe6a57ced3f0e85678b9c6cb6a17a7a77ed8dccc42e85c63777f
SSDEEP

24576:/Cfp5fB45foPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWQAN:/CfDfCfCbazR0vKLXZKAN

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  fa65f25e7235e58d10cabffc550a6b9c6d3022ee2b52dd70da29d81cab29ee96
- Size
  
  1.3MB
- MD5
  
  b4061597385844e732b1b6071a2a31cd
- SHA1
  
  28c1ef60419268e82d27f5354aaf9cd82293dd57
- SHA256
  
  fa65f25e7235e58d10cabffc550a6b9c6d3022ee2b52dd70da29d81cab29ee96
- SHA512
  
  0aef05258672c92c49994a54883ab98971ccbaf59faddd520f1a627af82bb926b96b2d44f410fe6a57ced3f0e85678b9c6cb6a17a7a77ed8dccc42e85c63777f
- SSDEEP
  
  24576:/Cfp5fB45foPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWQAN:/CfDfCfCbazR0vKLXZKAN
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2