General

  • Target

    5c479865c36425b9831c08b9ab55cf8d3623c78c344698cc270eb14f6394b21a.exe

  • Size

    128KB

  • Sample

    240522-3w7f5adh84

  • MD5

    1719e6fb75c3e79197b5a562f68a9910

  • SHA1

    95b34c6302946257b04d6c223070310b4f16e2f9

  • SHA256

    5c479865c36425b9831c08b9ab55cf8d3623c78c344698cc270eb14f6394b21a

  • SHA512

    93edec12bcc588dbd5b96a583d2fe27af3b558bb2bb4b14bf1af2b5f517ef663644e0414e22ea878242af9646b7562b7a9572abd7016945d483a6af7b55da39d

  • SSDEEP

    3072:50DpwrYXHyhcVIhs5e5Wx7cEGrhkngpDvchkqbAIQxgFM9MD:OpwsXqce55Wx4brq2Ah1FM6D

Score
10/10

Malware Config

Targets

    • Target

      5c479865c36425b9831c08b9ab55cf8d3623c78c344698cc270eb14f6394b21a.exe

    • Size

      128KB

    • MD5

      1719e6fb75c3e79197b5a562f68a9910

    • SHA1

      95b34c6302946257b04d6c223070310b4f16e2f9

    • SHA256

      5c479865c36425b9831c08b9ab55cf8d3623c78c344698cc270eb14f6394b21a

    • SHA512

      93edec12bcc588dbd5b96a583d2fe27af3b558bb2bb4b14bf1af2b5f517ef663644e0414e22ea878242af9646b7562b7a9572abd7016945d483a6af7b55da39d

    • SSDEEP

      3072:50DpwrYXHyhcVIhs5e5Wx7cEGrhkngpDvchkqbAIQxgFM9MD:OpwsXqce55Wx4brq2Ah1FM6D

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks