General

  • Target

    c86aa714b89fc7460e9a07408208a35071bc058b3abd8f1ca1f8930dce3f3aef

  • Size

    400KB

  • Sample

    240524-dps8gsbb48

  • MD5

    3ff614a939f97a3fe0bfc921d97e8dd1

  • SHA1

    052f644b06dab54e73f7d0351f92cb45be616665

  • SHA256

    c86aa714b89fc7460e9a07408208a35071bc058b3abd8f1ca1f8930dce3f3aef

  • SHA512

    07055019e897d4da738e9731486f5ef81845a802c4dbf18192021d776838aff8a66da655445af8d3fa5908608ede026c7ee7f48d0361d814c9de88106151df2d

  • SSDEEP

    6144:5yMhvlnZVoBqvl8ZV4U/vlfl+9DvlEZV4U/vlf0DrBqvl8ZV1:5y8vrgqvQ6IvYvc6IveDVqvQ/

Score
10/10

Malware Config

Targets

    • Target

      c86aa714b89fc7460e9a07408208a35071bc058b3abd8f1ca1f8930dce3f3aef

    • Size

      400KB

    • MD5

      3ff614a939f97a3fe0bfc921d97e8dd1

    • SHA1

      052f644b06dab54e73f7d0351f92cb45be616665

    • SHA256

      c86aa714b89fc7460e9a07408208a35071bc058b3abd8f1ca1f8930dce3f3aef

    • SHA512

      07055019e897d4da738e9731486f5ef81845a802c4dbf18192021d776838aff8a66da655445af8d3fa5908608ede026c7ee7f48d0361d814c9de88106151df2d

    • SSDEEP

      6144:5yMhvlnZVoBqvl8ZV4U/vlfl+9DvlEZV4U/vlf0DrBqvl8ZV1:5y8vrgqvQ6IvYvc6IveDVqvQ/

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks