General

  • Target

    6f2d79658221ac9c161a402ef4c8cb8745dc564206fee757790822c1d3bb84ad

  • Size

    256KB

  • Sample

    240522-2xypyacc31

  • MD5

    cb6597a58a4b4a662a326e2b21506566

  • SHA1

    238010de52be6fcf02ae212b9a7b705df76431b3

  • SHA256

    6f2d79658221ac9c161a402ef4c8cb8745dc564206fee757790822c1d3bb84ad

  • SHA512

    16811a3ed3f68bc8133bdc6238509a19f1fb9e9cd74394c9db54ad3a91d4b53c60a0e322498330c15df6ac8230d1c13581321968016f1b75ca3dee749643e941

  • SSDEEP

    6144:G8FtfB0WqcA7JSLrpui6yYPaIGckfru5xyDpui6yYPaIGcV:GgfB0fJSLrpV6yYP4rbpV6yYPl

Score
10/10

Malware Config

Targets

    • Target

      6f2d79658221ac9c161a402ef4c8cb8745dc564206fee757790822c1d3bb84ad

    • Size

      256KB

    • MD5

      cb6597a58a4b4a662a326e2b21506566

    • SHA1

      238010de52be6fcf02ae212b9a7b705df76431b3

    • SHA256

      6f2d79658221ac9c161a402ef4c8cb8745dc564206fee757790822c1d3bb84ad

    • SHA512

      16811a3ed3f68bc8133bdc6238509a19f1fb9e9cd74394c9db54ad3a91d4b53c60a0e322498330c15df6ac8230d1c13581321968016f1b75ca3dee749643e941

    • SSDEEP

      6144:G8FtfB0WqcA7JSLrpui6yYPaIGckfru5xyDpui6yYPaIGcV:GgfB0fJSLrpV6yYP4rbpV6yYPl

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks