General

  • Target

    d6460184a4afb76225a20fc00d321eff3312921ec2561b10b3484a64be30e251

  • Size

    391KB

  • Sample

    240524-egpe1acc22

  • MD5

    b1b170c89e8275e2b7bc07250d5e3133

  • SHA1

    4b76ef7686b3b6e67e39a83415f351207f6bcbf4

  • SHA256

    d6460184a4afb76225a20fc00d321eff3312921ec2561b10b3484a64be30e251

  • SHA512

    fe1195d49271cb7fbf3a89a6ad20046a12a054ab2fc37460ffd0c9aae3e6dd9563340b074d5b7e042569ab4b123787bbe5658780b4187f5c58f688297ec8cac4

  • SSDEEP

    12288:wKLMjdFT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:Fgd9XvEhdfJkKSkU3kHyuaRB5t6k0IJm

Score
10/10

Malware Config

Targets

    • Target

      d6460184a4afb76225a20fc00d321eff3312921ec2561b10b3484a64be30e251

    • Size

      391KB

    • MD5

      b1b170c89e8275e2b7bc07250d5e3133

    • SHA1

      4b76ef7686b3b6e67e39a83415f351207f6bcbf4

    • SHA256

      d6460184a4afb76225a20fc00d321eff3312921ec2561b10b3484a64be30e251

    • SHA512

      fe1195d49271cb7fbf3a89a6ad20046a12a054ab2fc37460ffd0c9aae3e6dd9563340b074d5b7e042569ab4b123787bbe5658780b4187f5c58f688297ec8cac4

    • SSDEEP

      12288:wKLMjdFT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:Fgd9XvEhdfJkKSkU3kHyuaRB5t6k0IJm

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks