98914485930f18ec906d318db5ff261914b61505e67d7ac65b31c7f43588ed33 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98914485930f18ec906d318db5ff261914b61505e67d7ac65b31c7f43588ed33
Size

121KB
Sample

240806-apr4msxcma
MD5

c6a73398ded19e79aa78b2f86c942e9a
SHA1

5d1cb3a39ce00318160bfecb5889bc5556ae3535
SHA256

98914485930f18ec906d318db5ff261914b61505e67d7ac65b31c7f43588ed33
SHA512

5b6a27d55b5b5bfe372da25c5a6fce5b04568c426dc82a2ba0c03188b33b20037763e5d11e73a4a01f4d4926e78ae43a65841b4c7a80e877f57c11f9b0c26bc8
SSDEEP

1536:pEJ31SAM2VIaPB+dKpHxJqTWUWOxu7b2gpPCV19zQYOd5ijJnD5ir3oGuiWDD:p01SAHQcpHreGpegsO7AJnD5tvv

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  98914485930f18ec906d318db5ff261914b61505e67d7ac65b31c7f43588ed33
- Size
  
  121KB
- MD5
  
  c6a73398ded19e79aa78b2f86c942e9a
- SHA1
  
  5d1cb3a39ce00318160bfecb5889bc5556ae3535
- SHA256
  
  98914485930f18ec906d318db5ff261914b61505e67d7ac65b31c7f43588ed33
- SHA512
  
  5b6a27d55b5b5bfe372da25c5a6fce5b04568c426dc82a2ba0c03188b33b20037763e5d11e73a4a01f4d4926e78ae43a65841b4c7a80e877f57c11f9b0c26bc8
- SSDEEP
  
  1536:pEJ31SAM2VIaPB+dKpHxJqTWUWOxu7b2gpPCV19zQYOd5ijJnD5ir3oGuiWDD:p01SAHQcpHreGpegsO7AJnD5tvv
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence