ad4f0bb471062d4a66cb4b07dfe3702021b760e1ac06cb920b8783f914de9b47 | Triage

Sharing

General

Target

ad4f0bb471062d4a66cb4b07dfe3702021b760e1ac06cb920b8783f914de9b47
Size

324KB
Sample

240802-d72ycatgnk
MD5

8f2bc61d6fca6e0d45d044a7448da7d7
SHA1

f8435faee1d01f6aaadc6b412f2804162ecfd5d9
SHA256

ad4f0bb471062d4a66cb4b07dfe3702021b760e1ac06cb920b8783f914de9b47
SHA512

dd5641f484182c7f9f6e8d29310cfd9647186d700d3579bedd8903fe5436148a39d96d4b3ade020074aedb12b6ca599f1a23db04a834b811a737bef54be68d9e
SSDEEP

6144:CAUTWFkWfa78zd5IF6rfBBcVPINRFYpfZvT6zAWq6JMf3us8ws:HrkPop5IFy5BcVPINRFYpfZvTmAWqeM2

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ad4f0bb471062d4a66cb4b07dfe3702021b760e1ac06cb920b8783f914de9b47
- Size
  
  324KB
- MD5
  
  8f2bc61d6fca6e0d45d044a7448da7d7
- SHA1
  
  f8435faee1d01f6aaadc6b412f2804162ecfd5d9
- SHA256
  
  ad4f0bb471062d4a66cb4b07dfe3702021b760e1ac06cb920b8783f914de9b47
- SHA512
  
  dd5641f484182c7f9f6e8d29310cfd9647186d700d3579bedd8903fe5436148a39d96d4b3ade020074aedb12b6ca599f1a23db04a834b811a737bef54be68d9e
- SSDEEP
  
  6144:CAUTWFkWfa78zd5IF6rfBBcVPINRFYpfZvT6zAWq6JMf3us8ws:HrkPop5IFy5BcVPINRFYpfZvTmAWqeM2
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence