General

  • Target

    aeee065defd1f460a07a4bb31a08ce92c171994d0227f7e149076a8b6437fd87

  • Size

    136KB

  • Sample

    240523-ca4v1ahf42

  • MD5

    7f3ca23714bc7b7242e9e24e161d7a65

  • SHA1

    aa94de0967333820177c93d3760e73b7ddf6bc9e

  • SHA256

    aeee065defd1f460a07a4bb31a08ce92c171994d0227f7e149076a8b6437fd87

  • SHA512

    956d4efbf4a8b729c28b4736b2acc33f8920c6ca8c0ef2bc49fa4402eee2e531add1d9b8f6c1925714f369da2d898ddf9ba3496490b89b5a86e1f03c8895b3d4

  • SSDEEP

    3072:rLaV+ZOCK8LgEbk8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/gU:/W+IN8EEbFtCApaH8m3QIvMWH5H3U

Score
10/10

Malware Config

Targets

    • Target

      aeee065defd1f460a07a4bb31a08ce92c171994d0227f7e149076a8b6437fd87

    • Size

      136KB

    • MD5

      7f3ca23714bc7b7242e9e24e161d7a65

    • SHA1

      aa94de0967333820177c93d3760e73b7ddf6bc9e

    • SHA256

      aeee065defd1f460a07a4bb31a08ce92c171994d0227f7e149076a8b6437fd87

    • SHA512

      956d4efbf4a8b729c28b4736b2acc33f8920c6ca8c0ef2bc49fa4402eee2e531add1d9b8f6c1925714f369da2d898ddf9ba3496490b89b5a86e1f03c8895b3d4

    • SSDEEP

      3072:rLaV+ZOCK8LgEbk8QYxQdLrCimBaH8UH30ZIvM6qMH5X3O/gU:/W+IN8EEbFtCApaH8m3QIvMWH5H3U

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks