3ff8dd1871469b67937318743ff4211fec707b6312425fe296cc0130231f6ce0 | Triage

Sharing

General

Target

3ff8dd1871469b67937318743ff4211fec707b6312425fe296cc0130231f6ce0
Size

714KB
Sample

240805-zm36ka1hmg
MD5

fc8cbc116cbde12966577b20d7e25baf
SHA1

80a0d37bfd5991350baec750316b7731706b024b
SHA256

3ff8dd1871469b67937318743ff4211fec707b6312425fe296cc0130231f6ce0
SHA512

55a419fc2db17a7bf8182a86f2abba10681b989a723af0f85493abeac64e12c004924266c20d3ecb5558a5ad674657926e97d5d335acd7deea3e51c91bcdd2cb
SSDEEP

12288:d4J2UaZ9Wya2103aGH7APNC+BNtsxPa2103aC:du2Ua+ya2+3apPNC+BNts9a2+3aC

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3ff8dd1871469b67937318743ff4211fec707b6312425fe296cc0130231f6ce0
- Size
  
  714KB
- MD5
  
  fc8cbc116cbde12966577b20d7e25baf
- SHA1
  
  80a0d37bfd5991350baec750316b7731706b024b
- SHA256
  
  3ff8dd1871469b67937318743ff4211fec707b6312425fe296cc0130231f6ce0
- SHA512
  
  55a419fc2db17a7bf8182a86f2abba10681b989a723af0f85493abeac64e12c004924266c20d3ecb5558a5ad674657926e97d5d335acd7deea3e51c91bcdd2cb
- SSDEEP
  
  12288:d4J2UaZ9Wya2103aGH7APNC+BNtsxPa2103aC:du2Ua+ya2+3apPNC+BNts9a2+3aC
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence