b218bdd20fc0b32def32dae8005c60fa3ce01e72afe51e6f1ffa1635d6ae7484 | Triage

Sharing

General

Target

b218bdd20fc0b32def32dae8005c60fa3ce01e72afe51e6f1ffa1635d6ae7484
Size

156KB
Sample

240727-cx3lfsvakg
MD5

4a3d79e52138f083fd9f14f0764d3d89
SHA1

9907953fcd29bab38fd2fb284be291c19ccbf8c3
SHA256

b218bdd20fc0b32def32dae8005c60fa3ce01e72afe51e6f1ffa1635d6ae7484
SHA512

70e43593723eb5eb3157eea8aacbc6a0083721608c3345ec6b48bbbf61ef77b490234fbe5f67eecff7e488e1affa22ff3bdcecb9817ca2adf632acc034f0d9af
SSDEEP

3072:9JJF7r8CDslnG1NPJ9IDlRxyhTbhgu+tAcrbFAJc+RsUiM:9h1Dr1NPsDshsrtMsC

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b218bdd20fc0b32def32dae8005c60fa3ce01e72afe51e6f1ffa1635d6ae7484
- Size
  
  156KB
- MD5
  
  4a3d79e52138f083fd9f14f0764d3d89
- SHA1
  
  9907953fcd29bab38fd2fb284be291c19ccbf8c3
- SHA256
  
  b218bdd20fc0b32def32dae8005c60fa3ce01e72afe51e6f1ffa1635d6ae7484
- SHA512
  
  70e43593723eb5eb3157eea8aacbc6a0083721608c3345ec6b48bbbf61ef77b490234fbe5f67eecff7e488e1affa22ff3bdcecb9817ca2adf632acc034f0d9af
- SSDEEP
  
  3072:9JJF7r8CDslnG1NPJ9IDlRxyhTbhgu+tAcrbFAJc+RsUiM:9h1Dr1NPsDshsrtMsC
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence