52562b2da1cd8b3667f7d0e563d7a574081ba681f5d1d72949fa77e9cd061bca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

52562b2da1cd8b3667f7d0e563d7a574081ba681f5d1d72949fa77e9cd061bca
Size

464KB
Sample

240531-1k85gafc85
MD5

7795f210bf4a31e97775443d36accbec
SHA1

6c7fcd9d9c8099e3e87123d0d1b3ecb0144d24be
SHA256

52562b2da1cd8b3667f7d0e563d7a574081ba681f5d1d72949fa77e9cd061bca
SHA512

dd746b7e066896218437b26c80f95864a552e747f07cf433b74e07152bc6e7f8e1a1bfef9494b0467dd193e655392034904a3eaa7b73014de907d758322be81a
SSDEEP

6144:bi05kH9OyU2uv5SRf/FWgFgtbgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukT4:urHGPv5SmptsDmUWuVZkxikdXcq

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  52562b2da1cd8b3667f7d0e563d7a574081ba681f5d1d72949fa77e9cd061bca
- Size
  
  464KB
- MD5
  
  7795f210bf4a31e97775443d36accbec
- SHA1
  
  6c7fcd9d9c8099e3e87123d0d1b3ecb0144d24be
- SHA256
  
  52562b2da1cd8b3667f7d0e563d7a574081ba681f5d1d72949fa77e9cd061bca
- SHA512
  
  dd746b7e066896218437b26c80f95864a552e747f07cf433b74e07152bc6e7f8e1a1bfef9494b0467dd193e655392034904a3eaa7b73014de907d758322be81a
- SSDEEP
  
  6144:bi05kH9OyU2uv5SRf/FWgFgtbgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukT4:urHGPv5SmptsDmUWuVZkxikdXcq
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2