d8e12745f02840c5de5352f75ee9936cba5bb50839c0e4169472f0180c8067eb | Triage

Sharing

General

Target

d8e12745f02840c5de5352f75ee9936cba5bb50839c0e4169472f0180c8067eb
Size

479KB
Sample

240606-hphh7sah7y
MD5

40dbddbffb617bec39878c06dbdf3bac
SHA1

7eabd12969fa1b2b6c94f0ef2ef7906a7e2f7587
SHA256

d8e12745f02840c5de5352f75ee9936cba5bb50839c0e4169472f0180c8067eb
SHA512

01d0b8e9a77ca02ba239477f5bbc0b382a9282caf3799578bc30ca76d09de9aaebf070d200df8d0df56128df88bbacc50b4ea5ef0cd3b6ba6f74a100b2921447
SSDEEP

6144:jWQLe+VIRJ6EQnT2leTLgNPx33fpu2leTLg:yQLORJ6EQ6Q2drQ

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  d8e12745f02840c5de5352f75ee9936cba5bb50839c0e4169472f0180c8067eb
- Size
  
  479KB
- MD5
  
  40dbddbffb617bec39878c06dbdf3bac
- SHA1
  
  7eabd12969fa1b2b6c94f0ef2ef7906a7e2f7587
- SHA256
  
  d8e12745f02840c5de5352f75ee9936cba5bb50839c0e4169472f0180c8067eb
- SHA512
  
  01d0b8e9a77ca02ba239477f5bbc0b382a9282caf3799578bc30ca76d09de9aaebf070d200df8d0df56128df88bbacc50b4ea5ef0cd3b6ba6f74a100b2921447
- SSDEEP
  
  6144:jWQLe+VIRJ6EQnT2leTLgNPx33fpu2leTLg:yQLORJ6EQ6Q2drQ
Score

10^/10

persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2