2037cb056a8f82e2aeaa456488662d3e87d32e827a98b1efa9ae01f52ff1b269 | Triage

Sharing

General

Target

2037cb056a8f82e2aeaa456488662d3e87d32e827a98b1efa9ae01f52ff1b269
Size

276KB
Sample

240801-zk5avazgqh
MD5

26517248939f2030270c3faf0850e784
SHA1

a2f6e4e76ac258bd968e7ce39eb672c94f3b389f
SHA256

2037cb056a8f82e2aeaa456488662d3e87d32e827a98b1efa9ae01f52ff1b269
SHA512

3b49047f9497bcb84675e8ca6f6aef64490bac002e8f4020c350879f630988e0a18e12f1c481607b0427a2a73d2e1da1b0e762790c3ce73dee21e63cdc34c661
SSDEEP

3072:nZMP/mKRReNVxDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDkOvhJjvJuP:GRRcpdWZHEFJ7aWN1rtMsQBOSGaF+

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2037cb056a8f82e2aeaa456488662d3e87d32e827a98b1efa9ae01f52ff1b269
- Size
  
  276KB
- MD5
  
  26517248939f2030270c3faf0850e784
- SHA1
  
  a2f6e4e76ac258bd968e7ce39eb672c94f3b389f
- SHA256
  
  2037cb056a8f82e2aeaa456488662d3e87d32e827a98b1efa9ae01f52ff1b269
- SHA512
  
  3b49047f9497bcb84675e8ca6f6aef64490bac002e8f4020c350879f630988e0a18e12f1c481607b0427a2a73d2e1da1b0e762790c3ce73dee21e63cdc34c661
- SSDEEP
  
  3072:nZMP/mKRReNVxDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDkOvhJjvJuP:GRRcpdWZHEFJ7aWN1rtMsQBOSGaF+
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence