0484b8a61a8275b216fde976c1188b982a3766faacdbf568b6a0474e516d3e1c | Triage

Sharing

General

Target

0484b8a61a8275b216fde976c1188b982a3766faacdbf568b6a0474e516d3e1c
Size

217KB
Sample

240727-wxen6ssdmj
MD5

b5d5b3735b1e058bf0218f0d7f06172e
SHA1

af33ee37d5de0d194f39e1eb3c6f072e72493abc
SHA256

0484b8a61a8275b216fde976c1188b982a3766faacdbf568b6a0474e516d3e1c
SHA512

7c351ab88f54e7aae6ae06e41025e560340a0a59659a3ab8e126d38a8915f78297a7903d799f03ac42aac52af141148f1249f97739da676301c73924d568663b
SSDEEP

6144:D+oc9DRUdcClJq2eenKQHfi1dZMGXF5ahdt3:CJyJG8AXFWt

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0484b8a61a8275b216fde976c1188b982a3766faacdbf568b6a0474e516d3e1c
- Size
  
  217KB
- MD5
  
  b5d5b3735b1e058bf0218f0d7f06172e
- SHA1
  
  af33ee37d5de0d194f39e1eb3c6f072e72493abc
- SHA256
  
  0484b8a61a8275b216fde976c1188b982a3766faacdbf568b6a0474e516d3e1c
- SHA512
  
  7c351ab88f54e7aae6ae06e41025e560340a0a59659a3ab8e126d38a8915f78297a7903d799f03ac42aac52af141148f1249f97739da676301c73924d568663b
- SSDEEP
  
  6144:D+oc9DRUdcClJq2eenKQHfi1dZMGXF5ahdt3:CJyJG8AXFWt
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence