2f57aedc9fcd87aa0ab8e5c37f91de311397fed39b77ec1cc302c11c270f94d4 | Triage

Sharing

General

Target

2f57aedc9fcd87aa0ab8e5c37f91de311397fed39b77ec1cc302c11c270f94d4
Size

260KB
Sample

240525-yvw7jshb35
MD5

441001c42c7e3069d6f73e8bf47e2251
SHA1

dec479001b3ff2b03290b07af844aeedf85989bf
SHA256

2f57aedc9fcd87aa0ab8e5c37f91de311397fed39b77ec1cc302c11c270f94d4
SHA512

3ec5a56da659eec8d18511c4ac696757b65acab12b57dbd7b0f86c61db0c4162bbde2231eae8b1d7facb967ef4ebec8a2d4eea8dc29bf228878caaf36e38d3d2
SSDEEP

6144:BompWUZGx+fV+3IGsxOnUY59x+LxUTsFCejM:Bo8W00wVUIfkU43O2ToM

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  2f57aedc9fcd87aa0ab8e5c37f91de311397fed39b77ec1cc302c11c270f94d4
- Size
  
  260KB
- MD5
  
  441001c42c7e3069d6f73e8bf47e2251
- SHA1
  
  dec479001b3ff2b03290b07af844aeedf85989bf
- SHA256
  
  2f57aedc9fcd87aa0ab8e5c37f91de311397fed39b77ec1cc302c11c270f94d4
- SHA512
  
  3ec5a56da659eec8d18511c4ac696757b65acab12b57dbd7b0f86c61db0c4162bbde2231eae8b1d7facb967ef4ebec8a2d4eea8dc29bf228878caaf36e38d3d2
- SSDEEP
  
  6144:BompWUZGx+fV+3IGsxOnUY59x+LxUTsFCejM:Bo8W00wVUIfkU43O2ToM
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2