19cd48c466c4114521f7fb0f80c9c6338313af03cb8558d74af0c7a092d29091 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19cd48c466c4114521f7fb0f80c9c6338313af03cb8558d74af0c7a092d29091
Size

59KB
Sample

240805-xs7d3ayhmd
MD5

549736d338c6a5bc58a252c7f440fce6
SHA1

bc9345f03199c54882cf594d694f5b6a6891e6d2
SHA256

19cd48c466c4114521f7fb0f80c9c6338313af03cb8558d74af0c7a092d29091
SHA512

f6975dfc503c9303da439accf2d0b3a9684d58ff5429968d90f88c03599bd8448a778b96bcbb0a3117a40fdf0c299c6eba3d1847cea1f4c66e3cc89e74bd5ac8
SSDEEP

768:jpyTsmM5D8qQZVQG90g5ZGaIBOH+hKJMoKbJ5wDxwAPAPYnLlza12p/1H5InXdno:jcY15D83/QGJiarZMXJ5e24562L29O

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  19cd48c466c4114521f7fb0f80c9c6338313af03cb8558d74af0c7a092d29091
- Size
  
  59KB
- MD5
  
  549736d338c6a5bc58a252c7f440fce6
- SHA1
  
  bc9345f03199c54882cf594d694f5b6a6891e6d2
- SHA256
  
  19cd48c466c4114521f7fb0f80c9c6338313af03cb8558d74af0c7a092d29091
- SHA512
  
  f6975dfc503c9303da439accf2d0b3a9684d58ff5429968d90f88c03599bd8448a778b96bcbb0a3117a40fdf0c299c6eba3d1847cea1f4c66e3cc89e74bd5ac8
- SSDEEP
  
  768:jpyTsmM5D8qQZVQG90g5ZGaIBOH+hKJMoKbJ5wDxwAPAPYnLlza12p/1H5InXdno:jcY15D83/QGJiarZMXJ5e24562L29O
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence