4aabdcbc6e820db853d6b418c1fc84cf8d796667a25e75fe4d6bb00683c04cf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4aabdcbc6e820db853d6b418c1fc84cf8d796667a25e75fe4d6bb00683c04cf6
Size

97KB
Sample

240726-1dc4fsyhma
MD5

9c8d62a9a1882e24f0b2cdfc2366934e
SHA1

e5d9e25a7019916cc68b0eb270125cc294f2fe74
SHA256

4aabdcbc6e820db853d6b418c1fc84cf8d796667a25e75fe4d6bb00683c04cf6
SHA512

939e7713f041d2a55adc6a1c431ea8d7227397a3f1e8f99c0fac832b8b2b3a1882123ebe7c17f7bb1758ea67ffb449aee1a406f322fe27ffd585df4e78a30a60
SSDEEP

1536:Amhgf5YcIP0BH9IoRVthY7JVdUvI4rCR8HkXvJXeYZ6:VOCcNI8thY7NUvfrCakfJXeK6

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  4aabdcbc6e820db853d6b418c1fc84cf8d796667a25e75fe4d6bb00683c04cf6
- Size
  
  97KB
- MD5
  
  9c8d62a9a1882e24f0b2cdfc2366934e
- SHA1
  
  e5d9e25a7019916cc68b0eb270125cc294f2fe74
- SHA256
  
  4aabdcbc6e820db853d6b418c1fc84cf8d796667a25e75fe4d6bb00683c04cf6
- SHA512
  
  939e7713f041d2a55adc6a1c431ea8d7227397a3f1e8f99c0fac832b8b2b3a1882123ebe7c17f7bb1758ea67ffb449aee1a406f322fe27ffd585df4e78a30a60
- SSDEEP
  
  1536:Amhgf5YcIP0BH9IoRVthY7JVdUvI4rCR8HkXvJXeYZ6:VOCcNI8thY7NUvfrCakfJXeK6
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence