5919026a0e8f8692c371260cbe2ac5c73b598e3417547383c0f9e5dabcd6a183 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5919026a0e8f8692c371260cbe2ac5c73b598e3417547383c0f9e5dabcd6a183
Size

55KB
Sample

240725-1rymbaxblp
MD5

756d25a992cd0670b5d2b6a97b78b171
SHA1

d9902163fda88fcddb6cd404cc822cce81cf83bb
SHA256

5919026a0e8f8692c371260cbe2ac5c73b598e3417547383c0f9e5dabcd6a183
SHA512

e86ad6ef377cd2053a9e751c5e20e1184300b4f7a5d0558f452783cffc4661fd2c6565dbf3b4ca3204b27b248f7177c5fa6d2281a922fead9941d4d1e328ce7b
SSDEEP

768:9rfilMZfy0Y0WTZ009hlp62MlbG+FQTs1QzkhJ3Ktttttttt61YCqMqf/1H59rGq:9rfiaJxY0Wb39Aq+JhVkvlg

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5919026a0e8f8692c371260cbe2ac5c73b598e3417547383c0f9e5dabcd6a183
- Size
  
  55KB
- MD5
  
  756d25a992cd0670b5d2b6a97b78b171
- SHA1
  
  d9902163fda88fcddb6cd404cc822cce81cf83bb
- SHA256
  
  5919026a0e8f8692c371260cbe2ac5c73b598e3417547383c0f9e5dabcd6a183
- SHA512
  
  e86ad6ef377cd2053a9e751c5e20e1184300b4f7a5d0558f452783cffc4661fd2c6565dbf3b4ca3204b27b248f7177c5fa6d2281a922fead9941d4d1e328ce7b
- SSDEEP
  
  768:9rfilMZfy0Y0WTZ009hlp62MlbG+FQTs1QzkhJ3Ktttttttt61YCqMqf/1H59rGq:9rfiaJxY0Wb39Aq+JhVkvlg
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence