32170f91f529bd1aa967535df061f8893c547598bd9ec9e705ad2494b0c24b1d | Triage

Sharing

General

Target

32170f91f529bd1aa967535df061f8893c547598bd9ec9e705ad2494b0c24b1d
Size

80KB
Sample

240805-yzy7ps1bpf
MD5

c233d4c0a1f3106ac673c80dc55b0a24
SHA1

178cb30b90596000faaa910f3a908976b8852cee
SHA256

32170f91f529bd1aa967535df061f8893c547598bd9ec9e705ad2494b0c24b1d
SHA512

aebc0dfd4473b61e021f1c400602d456b6a4c00f3cb0bb6947089b54c515e48d019c44d7058cebe5678422651c383f73bd5d739bac2c28abdf038c1cc64c40af
SSDEEP

1536:ilkUHij9ymeTPa7nh0SAuO5WhiVX+N+zL20gJi1i9:wkqAympnh0SAuOoiVOgzL20WKS

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  32170f91f529bd1aa967535df061f8893c547598bd9ec9e705ad2494b0c24b1d
- Size
  
  80KB
- MD5
  
  c233d4c0a1f3106ac673c80dc55b0a24
- SHA1
  
  178cb30b90596000faaa910f3a908976b8852cee
- SHA256
  
  32170f91f529bd1aa967535df061f8893c547598bd9ec9e705ad2494b0c24b1d
- SHA512
  
  aebc0dfd4473b61e021f1c400602d456b6a4c00f3cb0bb6947089b54c515e48d019c44d7058cebe5678422651c383f73bd5d739bac2c28abdf038c1cc64c40af
- SSDEEP
  
  1536:ilkUHij9ymeTPa7nh0SAuO5WhiVX+N+zL20gJi1i9:wkqAympnh0SAuOoiVOgzL20WKS
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence