e962aadd3790981a2b96beb49cbc1c06fc6c78ebaa808b098ede637122cc93f6 | Triage

Sharing

General

Target

e962aadd3790981a2b96beb49cbc1c06fc6c78ebaa808b098ede637122cc93f6
Size

327KB
Sample

240802-g7ygps1aqm
MD5

bcc8c4af98e7e316c10ddf27995c48c7
SHA1

2fd9cde86550e3a46de2fb27b0425ec19e5299b0
SHA256

e962aadd3790981a2b96beb49cbc1c06fc6c78ebaa808b098ede637122cc93f6
SHA512

cd8d962a490f40b08cec22d12c03afdd6d69c05810f09d7e8d36365fc695f1443ead4e369747c6fba817cfd5f0b3e0794a5d4056529254ea155251a2c3e6cc88
SSDEEP

3072:eqlT1N1wWJGIFf0HStVatCEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESLjb5m0t42:ekT1NyyGI3VaDj0+r+Mds9BY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e962aadd3790981a2b96beb49cbc1c06fc6c78ebaa808b098ede637122cc93f6
- Size
  
  327KB
- MD5
  
  bcc8c4af98e7e316c10ddf27995c48c7
- SHA1
  
  2fd9cde86550e3a46de2fb27b0425ec19e5299b0
- SHA256
  
  e962aadd3790981a2b96beb49cbc1c06fc6c78ebaa808b098ede637122cc93f6
- SHA512
  
  cd8d962a490f40b08cec22d12c03afdd6d69c05810f09d7e8d36365fc695f1443ead4e369747c6fba817cfd5f0b3e0794a5d4056529254ea155251a2c3e6cc88
- SSDEEP
  
  3072:eqlT1N1wWJGIFf0HStVatCEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEESLjb5m0t42:ekT1NyyGI3VaDj0+r+Mds9BY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence