8013ad46d11205ca0ad1361254a1702d39bcf30f1171e61436dab613c05cfec6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8013ad46d11205ca0ad1361254a1702d39bcf30f1171e61436dab613c05cfec6
Size

93KB
Sample

240726-3xt77awdnf
MD5

4efcfef67dba1272e60d57242f98928c
SHA1

0c744cd866aaba825296a7c377315a700bfaa690
SHA256

8013ad46d11205ca0ad1361254a1702d39bcf30f1171e61436dab613c05cfec6
SHA512

36407d10e27393637075975e9b21291c5a88e5f66fa55f481da2276e3969d85a7df0b3c4458a2a6fa1cfe634cd33dbae966f8175614116d268325ad32e6545bb
SSDEEP

1536:Zia89gvNdQWszaAkMSDcPhXftFrXBZZ3V3wo3+4H2PSpnwCsRQ8RkRLJzeLD9N0/:ZiaG6NdsxxSDcPhvvrxZZ3Vg25HiSpnh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8013ad46d11205ca0ad1361254a1702d39bcf30f1171e61436dab613c05cfec6
- Size
  
  93KB
- MD5
  
  4efcfef67dba1272e60d57242f98928c
- SHA1
  
  0c744cd866aaba825296a7c377315a700bfaa690
- SHA256
  
  8013ad46d11205ca0ad1361254a1702d39bcf30f1171e61436dab613c05cfec6
- SHA512
  
  36407d10e27393637075975e9b21291c5a88e5f66fa55f481da2276e3969d85a7df0b3c4458a2a6fa1cfe634cd33dbae966f8175614116d268325ad32e6545bb
- SSDEEP
  
  1536:Zia89gvNdQWszaAkMSDcPhXftFrXBZZ3V3wo3+4H2PSpnwCsRQ8RkRLJzeLD9N0/:ZiaG6NdsxxSDcPhvvrxZZ3Vg25HiSpnh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence