General

  • Target

    6a33092d8dd6f563e3ba4f06f9aeaf2574c1ff1a80f1cf27132e22d894419d7c

  • Size

    161KB

  • Sample

    240522-2qecqabh5s

  • MD5

    98756b29483ddde2ee64d4b4ce0e1758

  • SHA1

    6cc5f219efb967d51aad2e292215d20f3551ab6c

  • SHA256

    6a33092d8dd6f563e3ba4f06f9aeaf2574c1ff1a80f1cf27132e22d894419d7c

  • SHA512

    bb616d2cbcaa51e04d3eba4c05c34af5c8f684e80a737b67f0d46eb398dd5aba0c4d393f641cdbfae617b0a664d83427759cf8ca11d9d1449711d6ec317fd3be

  • SSDEEP

    3072:F5niab+gcTgakZdVos12wrukvZVwtCJXeex7rrIRZK8K8/kv:FNiab+g0gBzos12+ukxVwtmeetrIyR

Score
10/10

Malware Config

Targets

    • Target

      6a33092d8dd6f563e3ba4f06f9aeaf2574c1ff1a80f1cf27132e22d894419d7c

    • Size

      161KB

    • MD5

      98756b29483ddde2ee64d4b4ce0e1758

    • SHA1

      6cc5f219efb967d51aad2e292215d20f3551ab6c

    • SHA256

      6a33092d8dd6f563e3ba4f06f9aeaf2574c1ff1a80f1cf27132e22d894419d7c

    • SHA512

      bb616d2cbcaa51e04d3eba4c05c34af5c8f684e80a737b67f0d46eb398dd5aba0c4d393f641cdbfae617b0a664d83427759cf8ca11d9d1449711d6ec317fd3be

    • SSDEEP

      3072:F5niab+gcTgakZdVos12wrukvZVwtCJXeex7rrIRZK8K8/kv:FNiab+g0gBzos12+ukxVwtmeetrIyR

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks