2637785faf5b3c8318aa9c552c695a3d2baba46ca1d3182d72305ee10bf09217 | Triage

Sharing

General

Target

2637785faf5b3c8318aa9c552c695a3d2baba46ca1d3182d72305ee10bf09217
Size

400KB
Sample

240801-1demaa1dqh
MD5

b4882c911e3a3d9d5d9883d831402034
SHA1

db452df8595a4360356095ebab50682c47b61906
SHA256

2637785faf5b3c8318aa9c552c695a3d2baba46ca1d3182d72305ee10bf09217
SHA512

050974a3f117697fd1b0a0397578cdf7f3bf68219a3ef619352e9307e662b3df484c28e0cc070a0b41ba7528b804c9871e27b7cfcb99a051b1e51d71e4387b18
SSDEEP

6144:YPQD+NWdLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:Y4hRrgryg426RQagrkj

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2637785faf5b3c8318aa9c552c695a3d2baba46ca1d3182d72305ee10bf09217
- Size
  
  400KB
- MD5
  
  b4882c911e3a3d9d5d9883d831402034
- SHA1
  
  db452df8595a4360356095ebab50682c47b61906
- SHA256
  
  2637785faf5b3c8318aa9c552c695a3d2baba46ca1d3182d72305ee10bf09217
- SHA512
  
  050974a3f117697fd1b0a0397578cdf7f3bf68219a3ef619352e9307e662b3df484c28e0cc070a0b41ba7528b804c9871e27b7cfcb99a051b1e51d71e4387b18
- SSDEEP
  
  6144:YPQD+NWdLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:Y4hRrgryg426RQagrkj
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence