18b97fd718b7f964fe4479ccc4e40de63ddd214b01e0c0160cbf8644b59d9e99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c45d1f308add421748a2dcaa5829782d.exe
Size

464KB
Sample

240517-r3qw6sce35
MD5

c45d1f308add421748a2dcaa5829782d
SHA1

f4d612e1dda1b68586f6a19843c531722be7d339
SHA256

18b97fd718b7f964fe4479ccc4e40de63ddd214b01e0c0160cbf8644b59d9e99
SHA512

4ba42dc131495fbdef2c5551b679e7156f763234f499113688c217ea3e52c3e95c4036b0b2afee68a72d4b87837a995af822d6b162b71af85a9b8187a607d034
SSDEEP

12288:Wglc87eqqV5e+wBV6O+khVAMq4V52MfKLL70EyKMsK0:WgSqqHeVBxr2uV52MSr0EyeP

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  c45d1f308add421748a2dcaa5829782d.exe
- Size
  
  464KB
- MD5
  
  c45d1f308add421748a2dcaa5829782d
- SHA1
  
  f4d612e1dda1b68586f6a19843c531722be7d339
- SHA256
  
  18b97fd718b7f964fe4479ccc4e40de63ddd214b01e0c0160cbf8644b59d9e99
- SHA512
  
  4ba42dc131495fbdef2c5551b679e7156f763234f499113688c217ea3e52c3e95c4036b0b2afee68a72d4b87837a995af822d6b162b71af85a9b8187a607d034
- SSDEEP
  
  12288:Wglc87eqqV5e+wBV6O+khVAMq4V52MfKLL70EyKMsK0:WgSqqHeVBxr2uV52MSr0EyeP
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2