911b646a23d9a1b10e4894cccca612f41797bbb957c9be67aa140ca54dadb630 | Triage

Sharing

General

Target

911b646a23d9a1b10e4894cccca612f41797bbb957c9be67aa140ca54dadb630
Size

108KB
Sample

240807-aw4e9aygmd
MD5

d9fa0b732ca91f9a68b82e278699f2f0
SHA1

e7e7c3d567eb7bf756447bafde153698800f99c7
SHA256

911b646a23d9a1b10e4894cccca612f41797bbb957c9be67aa140ca54dadb630
SHA512

872ff76b0a38e4b47c4d0c8ad4cfdd82523a33956feff9e31ffb3ebd7fc737f99a5a8f5e3fbe512f52665be4aad40a76271acf7a83f64b78dfae24d9e9154bf9
SSDEEP

1536:dcByqFrdCGMZ3aQr6U5vLELRWsN4sOk004HE1FcFmKcUsvKwF:dildm3a8LE/Xuk1FcFmKcUsvKwF

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  911b646a23d9a1b10e4894cccca612f41797bbb957c9be67aa140ca54dadb630
- Size
  
  108KB
- MD5
  
  d9fa0b732ca91f9a68b82e278699f2f0
- SHA1
  
  e7e7c3d567eb7bf756447bafde153698800f99c7
- SHA256
  
  911b646a23d9a1b10e4894cccca612f41797bbb957c9be67aa140ca54dadb630
- SHA512
  
  872ff76b0a38e4b47c4d0c8ad4cfdd82523a33956feff9e31ffb3ebd7fc737f99a5a8f5e3fbe512f52665be4aad40a76271acf7a83f64b78dfae24d9e9154bf9
- SSDEEP
  
  1536:dcByqFrdCGMZ3aQr6U5vLELRWsN4sOk004HE1FcFmKcUsvKwF:dildm3a8LE/Xuk1FcFmKcUsvKwF
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence