870e1cee29775cdc254706e7572d161c9690e59b497f5b079e08259c374062b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

870e1cee29775cdc254706e7572d161c9690e59b497f5b079e08259c374062b8
Size

64KB
Sample

240802-3zw5kawbmr
MD5

321571d19bba4b68c2974a09368caa00
SHA1

c9cd463b556bc420e2330bf73ac2d4b29253a5a1
SHA256

870e1cee29775cdc254706e7572d161c9690e59b497f5b079e08259c374062b8
SHA512

b4b1c32320f614ad95eb227767db33f7c7bcb2d746d92ec02c9974519c1db3ed439a663f4a30396eec77db28513b1ca3ba2048f5ad7f0c18c8fa6028cefd8297
SSDEEP

1536:MQ6e9okhwu5TkwQdkoE7u+uBCnsqPTCRhsBs1P0FEK72LGAMCeW:MOnuu5TkwQdkoE7u+uBCnsqP2bsB+P04

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  870e1cee29775cdc254706e7572d161c9690e59b497f5b079e08259c374062b8
- Size
  
  64KB
- MD5
  
  321571d19bba4b68c2974a09368caa00
- SHA1
  
  c9cd463b556bc420e2330bf73ac2d4b29253a5a1
- SHA256
  
  870e1cee29775cdc254706e7572d161c9690e59b497f5b079e08259c374062b8
- SHA512
  
  b4b1c32320f614ad95eb227767db33f7c7bcb2d746d92ec02c9974519c1db3ed439a663f4a30396eec77db28513b1ca3ba2048f5ad7f0c18c8fa6028cefd8297
- SSDEEP
  
  1536:MQ6e9okhwu5TkwQdkoE7u+uBCnsqPTCRhsBs1P0FEK72LGAMCeW:MOnuu5TkwQdkoE7u+uBCnsqP2bsB+P04
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence