General

  • Target

    ca328e702fdbc09cc08909e093d57085461b887295979d6cfdde630ab796ae0f

  • Size

    104KB

  • Sample

    240524-dtrv8abc39

  • MD5

    2852bd0cd7543ba934392566317ee36e

  • SHA1

    a4c91c3f3abee6d847c9c5c02061e9e9942b4be5

  • SHA256

    ca328e702fdbc09cc08909e093d57085461b887295979d6cfdde630ab796ae0f

  • SHA512

    e2c9176304f3c8a532c466be7ff41540359c5a595a1a7b1ac20305f7545d201443a4345b9146a2bb292d2cff316d55f2eba789bff3ecec52ab3e6f9e66baa82f

  • SSDEEP

    3072:8LmKMgyWKyjl6v1eMDSKLiTWCTeohuE+h3+rJM++SYSUZCbCdW:8qKMkKT13SDwoMEcAJN+SYSUZCbX

Score
10/10

Malware Config

Targets

    • Target

      ca328e702fdbc09cc08909e093d57085461b887295979d6cfdde630ab796ae0f

    • Size

      104KB

    • MD5

      2852bd0cd7543ba934392566317ee36e

    • SHA1

      a4c91c3f3abee6d847c9c5c02061e9e9942b4be5

    • SHA256

      ca328e702fdbc09cc08909e093d57085461b887295979d6cfdde630ab796ae0f

    • SHA512

      e2c9176304f3c8a532c466be7ff41540359c5a595a1a7b1ac20305f7545d201443a4345b9146a2bb292d2cff316d55f2eba789bff3ecec52ab3e6f9e66baa82f

    • SSDEEP

      3072:8LmKMgyWKyjl6v1eMDSKLiTWCTeohuE+h3+rJM++SYSUZCbCdW:8qKMkKT13SDwoMEcAJN+SYSUZCbX

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks