ca306da42bcd0f3695c07a6f294d98ad2f79289577b672e2bd941fa5aff7a6e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca306da42bcd0f3695c07a6f294d98ad2f79289577b672e2bd941fa5aff7a6e5
Size

608KB
Sample

240726-dymr3awhpd
MD5

8339ba1a8a9b06696d5808edd27c4f18
SHA1

90ada4fa5251a8404988e72329f2c19196744f6b
SHA256

ca306da42bcd0f3695c07a6f294d98ad2f79289577b672e2bd941fa5aff7a6e5
SHA512

46b16b679eec785618337eef3d05e81259c247b2e98f962c558b384f7a8023e59625dcdff1eb2487658e13c8686ef3c048b1db7eb53d3e714edf3e6c1a4b60ed
SSDEEP

12288:23ynkY660fIaDZkY660f8jTK/XhdAwlt01t:3ngsaDZgQjGkwlg

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ca306da42bcd0f3695c07a6f294d98ad2f79289577b672e2bd941fa5aff7a6e5
- Size
  
  608KB
- MD5
  
  8339ba1a8a9b06696d5808edd27c4f18
- SHA1
  
  90ada4fa5251a8404988e72329f2c19196744f6b
- SHA256
  
  ca306da42bcd0f3695c07a6f294d98ad2f79289577b672e2bd941fa5aff7a6e5
- SHA512
  
  46b16b679eec785618337eef3d05e81259c247b2e98f962c558b384f7a8023e59625dcdff1eb2487658e13c8686ef3c048b1db7eb53d3e714edf3e6c1a4b60ed
- SSDEEP
  
  12288:23ynkY660fIaDZkY660f8jTK/XhdAwlt01t:3ngsaDZgQjGkwlg
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence