26800d92f9412ec3d1cbc8bf2ec53c6b91d81b2488efa28c918b0e36954f6a46 | Triage

Sharing

General

Target

26800d92f9412ec3d1cbc8bf2ec53c6b91d81b2488efa28c918b0e36954f6a46
Size

180KB
Sample

240727-y4j9cazakf
MD5

451041bf88a8d6934fe4c5237cc5f470
SHA1

d1546ea6bcd6423a39f0814924bed34bdd31e82c
SHA256

26800d92f9412ec3d1cbc8bf2ec53c6b91d81b2488efa28c918b0e36954f6a46
SHA512

c93ae47708701cd584dabb496f9a451af78c59b5f46780ec765be7abd5dc6da8dbc7ab998e0723cbf7835f0332897a968502adc9f9face2f3d0c063b0186fba9
SSDEEP

3072:HAqnouDkViYbIoovXa6miE6Wj4/glEeqZYLtLw32NX/qs/YTJv1tFk+Fkkuj8UAu:g00MYsoovXLdE6D/gaeFq32NX/qs/YTa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  26800d92f9412ec3d1cbc8bf2ec53c6b91d81b2488efa28c918b0e36954f6a46
- Size
  
  180KB
- MD5
  
  451041bf88a8d6934fe4c5237cc5f470
- SHA1
  
  d1546ea6bcd6423a39f0814924bed34bdd31e82c
- SHA256
  
  26800d92f9412ec3d1cbc8bf2ec53c6b91d81b2488efa28c918b0e36954f6a46
- SHA512
  
  c93ae47708701cd584dabb496f9a451af78c59b5f46780ec765be7abd5dc6da8dbc7ab998e0723cbf7835f0332897a968502adc9f9face2f3d0c063b0186fba9
- SSDEEP
  
  3072:HAqnouDkViYbIoovXa6miE6Wj4/glEeqZYLtLw32NX/qs/YTJv1tFk+Fkkuj8UAu:g00MYsoovXLdE6D/gaeFq32NX/qs/YTa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence