ca69839761aac319074bad31bd530838f06ed8edd8444f21730d78f28270a0e7 | Triage

Sharing

General

Target

ca69839761aac319074bad31bd530838f06ed8edd8444f21730d78f28270a0e7
Size

280KB
Sample

240514-cthrwafg95
MD5

763492470c7b07cb588f364663dc29fb
SHA1

8031b59aa4c866bc4df02930048aa5faa83b2fed
SHA256

ca69839761aac319074bad31bd530838f06ed8edd8444f21730d78f28270a0e7
SHA512

461184be9d577b2a7994bedb676f3ea707bcf777185bef0d293536014e9f13eb813eb6296448c6c0d02f9b0dc11ccfcc35fe6a31cd9c43e2d554c51c5cd051bd
SSDEEP

3072:2kx2/5cax2brvhD94hZK7xVG9Btj676ZBI:2J/6ax2brl9qZo4tjS6Y

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  ca69839761aac319074bad31bd530838f06ed8edd8444f21730d78f28270a0e7
- Size
  
  280KB
- MD5
  
  763492470c7b07cb588f364663dc29fb
- SHA1
  
  8031b59aa4c866bc4df02930048aa5faa83b2fed
- SHA256
  
  ca69839761aac319074bad31bd530838f06ed8edd8444f21730d78f28270a0e7
- SHA512
  
  461184be9d577b2a7994bedb676f3ea707bcf777185bef0d293536014e9f13eb813eb6296448c6c0d02f9b0dc11ccfcc35fe6a31cd9c43e2d554c51c5cd051bd
- SSDEEP
  
  3072:2kx2/5cax2brvhD94hZK7xVG9Btj676ZBI:2J/6ax2brl9qZo4tjS6Y
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2