General

  • Target

    350bfc26de701d1b6bfdf8deef3db454d048d2ab95efd1b2c1eb8bb1f301ec9d

  • Size

    1.2MB

  • Sample

    240710-zzh16aself

  • MD5

    130e1e5f466e9fc938e9188a3c1b054e

  • SHA1

    ae48666d5a9ce756e33f139662c2c1a764816d8a

  • SHA256

    350bfc26de701d1b6bfdf8deef3db454d048d2ab95efd1b2c1eb8bb1f301ec9d

  • SHA512

    ada6a77f63e09064c5e81451b796471c2e8ec9ab754da5517fc703aa6eacb463f396a7ebe17c0ee6bbf2c0fa20b4270919fd2f666de7c104fac59a91e7b537f8

  • SSDEEP

    12288:OcIAPk7yMFv4pnsKvNA+XTvZHWuEo3oW2to:OcIRFgpsKv2EvZHp3oW2to

Score
10/10

Malware Config

Targets

    • Target

      350bfc26de701d1b6bfdf8deef3db454d048d2ab95efd1b2c1eb8bb1f301ec9d

    • Size

      1.2MB

    • MD5

      130e1e5f466e9fc938e9188a3c1b054e

    • SHA1

      ae48666d5a9ce756e33f139662c2c1a764816d8a

    • SHA256

      350bfc26de701d1b6bfdf8deef3db454d048d2ab95efd1b2c1eb8bb1f301ec9d

    • SHA512

      ada6a77f63e09064c5e81451b796471c2e8ec9ab754da5517fc703aa6eacb463f396a7ebe17c0ee6bbf2c0fa20b4270919fd2f666de7c104fac59a91e7b537f8

    • SSDEEP

      12288:OcIAPk7yMFv4pnsKvNA+XTvZHWuEo3oW2to:OcIRFgpsKv2EvZHp3oW2to

    Score
    10/10
    • Adds autorun key to be loaded by Explorer.exe on startup

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Defense Evasion

Modify Registry

1
T1112

Tasks