f40860ef9f58784a14f4545b9e46d59498b2a346a26eb12c1a1e493f137326e0 | Triage

Sharing

General

Target

f40860ef9f58784a14f4545b9e46d59498b2a346a26eb12c1a1e493f137326e0
Size

232KB
Sample

240727-glcm4stbld
MD5

e43ddaf057c37ea847ab3be429b58e3c
SHA1

768aa9c8c4991843406e9e54a5e196a9da6ec683
SHA256

f40860ef9f58784a14f4545b9e46d59498b2a346a26eb12c1a1e493f137326e0
SHA512

262b11f114ae3ddd09a5626339ef73a0dd84ce88ca299a62f769ca8a410e0e3309379b2a6c173c9dc268ea2a1a5c334536fbc2f35f2664cfaf186d691066f82f
SSDEEP

6144:SRFaHI+tmTlZ3D6s21L7/s50z/Wa3/PNlPX:SW705kWMR

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f40860ef9f58784a14f4545b9e46d59498b2a346a26eb12c1a1e493f137326e0
- Size
  
  232KB
- MD5
  
  e43ddaf057c37ea847ab3be429b58e3c
- SHA1
  
  768aa9c8c4991843406e9e54a5e196a9da6ec683
- SHA256
  
  f40860ef9f58784a14f4545b9e46d59498b2a346a26eb12c1a1e493f137326e0
- SHA512
  
  262b11f114ae3ddd09a5626339ef73a0dd84ce88ca299a62f769ca8a410e0e3309379b2a6c173c9dc268ea2a1a5c334536fbc2f35f2664cfaf186d691066f82f
- SSDEEP
  
  6144:SRFaHI+tmTlZ3D6s21L7/s50z/Wa3/PNlPX:SW705kWMR
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence