General

  • Target

    5bd98fba23fa68ba6fa6883338fc14fe7010f698e25af99a12dce47350ac72ff.exe

  • Size

    223KB

  • Sample

    240522-3vnydsdg3t

  • MD5

    01e54bc1db67ee9747a9cede5d261120

  • SHA1

    7ad8ef53070871a3b5d74d1f2ae21d86c50b0836

  • SHA256

    5bd98fba23fa68ba6fa6883338fc14fe7010f698e25af99a12dce47350ac72ff

  • SHA512

    1c1b59b4fad61c2e3ef9966ff5908299cfa24d00a08843a26b2c3b77066915f2862a73cc20e8c7655711d6b026428919dd52582b7741e4aa4c903d1afb5e82ae

  • SSDEEP

    3072:Q1UFzxMbKUVAURfE+HcdpgZiT0PMCU080SrXSx8A6WoG:6YURs+HcdeZpMCU080SOx8RTG

Score
10/10

Malware Config

Targets

    • Target

      5bd98fba23fa68ba6fa6883338fc14fe7010f698e25af99a12dce47350ac72ff.exe

    • Size

      223KB

    • MD5

      01e54bc1db67ee9747a9cede5d261120

    • SHA1

      7ad8ef53070871a3b5d74d1f2ae21d86c50b0836

    • SHA256

      5bd98fba23fa68ba6fa6883338fc14fe7010f698e25af99a12dce47350ac72ff

    • SHA512

      1c1b59b4fad61c2e3ef9966ff5908299cfa24d00a08843a26b2c3b77066915f2862a73cc20e8c7655711d6b026428919dd52582b7741e4aa4c903d1afb5e82ae

    • SSDEEP

      3072:Q1UFzxMbKUVAURfE+HcdpgZiT0PMCU080SrXSx8A6WoG:6YURs+HcdeZpMCU080SOx8RTG

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks