856c3ae5d245ee469789a1071e4e65b0abf013dcca1b12b073344c5ef4978a37 | Triage

Sharing

General

Target

856c3ae5d245ee469789a1071e4e65b0abf013dcca1b12b073344c5ef4978a37
Size

860KB
Sample

240802-b9gzvatcka
MD5

5dae3d0dc2404ca4177e642ff8c51433
SHA1

ef5299abec133986346019dd6bbc3a66745003e8
SHA256

856c3ae5d245ee469789a1071e4e65b0abf013dcca1b12b073344c5ef4978a37
SHA512

1c25191a97e8efde4a5c9dc5e07bd48789959fe7b7425ed783b5590cda80ed6c37b8578f557340bebcf1add39b3246b2baff42c6a1fb634c0be9084b6f5eb10b
SSDEEP

24576:4g5hPuh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YS:4PbazR0vD

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  856c3ae5d245ee469789a1071e4e65b0abf013dcca1b12b073344c5ef4978a37
- Size
  
  860KB
- MD5
  
  5dae3d0dc2404ca4177e642ff8c51433
- SHA1
  
  ef5299abec133986346019dd6bbc3a66745003e8
- SHA256
  
  856c3ae5d245ee469789a1071e4e65b0abf013dcca1b12b073344c5ef4978a37
- SHA512
  
  1c25191a97e8efde4a5c9dc5e07bd48789959fe7b7425ed783b5590cda80ed6c37b8578f557340bebcf1add39b3246b2baff42c6a1fb634c0be9084b6f5eb10b
- SSDEEP
  
  24576:4g5hPuh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YS:4PbazR0vD
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence