67d6b1e941d07b11f110da3e2522539bc268fcffad8e1ffb13d6b329d5725188 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67d6b1e941d07b11f110da3e2522539bc268fcffad8e1ffb13d6b329d5725188
Size

305KB
Sample

240727-27b9paxbmc
MD5

c35257d23f411a732f8b49f4eed9768b
SHA1

ed470c36b9210b1e51b81a1ee1cc78054adeb929
SHA256

67d6b1e941d07b11f110da3e2522539bc268fcffad8e1ffb13d6b329d5725188
SHA512

0d5335581cf3e3648679deafec3c4d4272bae7b5832b4fb2694996397fd27e12c51560b2c81c2d5baed11093110b4265eb625061820f3f89de62b24d31cb200d
SSDEEP

3072:rado6GYZBVSWl8rgZ2+lc802eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVDbd:W3ZBVSzcplc85dZMGXF5ahdt3b0668

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  67d6b1e941d07b11f110da3e2522539bc268fcffad8e1ffb13d6b329d5725188
- Size
  
  305KB
- MD5
  
  c35257d23f411a732f8b49f4eed9768b
- SHA1
  
  ed470c36b9210b1e51b81a1ee1cc78054adeb929
- SHA256
  
  67d6b1e941d07b11f110da3e2522539bc268fcffad8e1ffb13d6b329d5725188
- SHA512
  
  0d5335581cf3e3648679deafec3c4d4272bae7b5832b4fb2694996397fd27e12c51560b2c81c2d5baed11093110b4265eb625061820f3f89de62b24d31cb200d
- SSDEEP
  
  3072:rado6GYZBVSWl8rgZ2+lc802eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVDbd:W3ZBVSzcplc85dZMGXF5ahdt3b0668
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence