21e2aba95284eb086332ff24b3ff334b5319fa659f556796a783a2af1c367e74 | Triage

Sharing

General

Target

21e2aba95284eb086332ff24b3ff334b5319fa659f556796a783a2af1c367e74
Size

78KB
Sample

240801-zzqq1a1aqb
MD5

df7ae640c5ba7238b325da69d66a6800
SHA1

fcdaf18e7865d7e811b1514586c0443be192c531
SHA256

21e2aba95284eb086332ff24b3ff334b5319fa659f556796a783a2af1c367e74
SHA512

e853175b8a96bea7c5525583c25a3ba122ce874b0de19b426ef8d3e0f29c7899eee8d755648989434ac4e12bdec4e1357b8c08d892e90a75db6e4b83e3fd5dd7
SSDEEP

1536:Lq+ZK3lxkRvlJBV3C4PizbsyfeItkIggsJVHcbns:pSlYI4azw8eItogsDes

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  21e2aba95284eb086332ff24b3ff334b5319fa659f556796a783a2af1c367e74
- Size
  
  78KB
- MD5
  
  df7ae640c5ba7238b325da69d66a6800
- SHA1
  
  fcdaf18e7865d7e811b1514586c0443be192c531
- SHA256
  
  21e2aba95284eb086332ff24b3ff334b5319fa659f556796a783a2af1c367e74
- SHA512
  
  e853175b8a96bea7c5525583c25a3ba122ce874b0de19b426ef8d3e0f29c7899eee8d755648989434ac4e12bdec4e1357b8c08d892e90a75db6e4b83e3fd5dd7
- SSDEEP
  
  1536:Lq+ZK3lxkRvlJBV3C4PizbsyfeItkIggsJVHcbns:pSlYI4azw8eItogsDes
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence