0b82fb6d47db54401a1de8c489b9eb0b437b68c18afe5a4987a860dc21756e71 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b82fb6d47db54401a1de8c489b9eb0b437b68c18afe5a4987a860dc21756e71
Size

1.0MB
Sample

240602-w945laah7v
MD5

5f821bd8901258e85fb7cfd7203dc3b5
SHA1

6fc0fabf8a0c129132be03236d1f4e1a61f00ddc
SHA256

0b82fb6d47db54401a1de8c489b9eb0b437b68c18afe5a4987a860dc21756e71
SHA512

a187c312439a5eee44fa5549d038f5fd96c7665e8e781219c8e4beb07546f9ec634e48a16cd91f6837d3382c7d4f9b820338f2bad3064e64bc2c4af18b55a238
SSDEEP

6144:9i05kH9OyU2uv5SRf/FWgFgtBgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukT4:orHGPv5Smpt6DmUWuVZkxikdXcq

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  0b82fb6d47db54401a1de8c489b9eb0b437b68c18afe5a4987a860dc21756e71
- Size
  
  1.0MB
- MD5
  
  5f821bd8901258e85fb7cfd7203dc3b5
- SHA1
  
  6fc0fabf8a0c129132be03236d1f4e1a61f00ddc
- SHA256
  
  0b82fb6d47db54401a1de8c489b9eb0b437b68c18afe5a4987a860dc21756e71
- SHA512
  
  a187c312439a5eee44fa5549d038f5fd96c7665e8e781219c8e4beb07546f9ec634e48a16cd91f6837d3382c7d4f9b820338f2bad3064e64bc2c4af18b55a238
- SSDEEP
  
  6144:9i05kH9OyU2uv5SRf/FWgFgtBgqIRAUW9kVYeVprU4wfhTv5xD2ZP0GVGdXcukT4:orHGPv5Smpt6DmUWuVZkxikdXcq
Score

7^/10

persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2