a6cbadb3ad60ee331feff8c0138da2f6cf016d07547d6c2b366dfef02cef14ea | Triage

Sharing

General

Target

a6cbadb3ad60ee331feff8c0138da2f6cf016d07547d6c2b366dfef02cef14ea
Size

96KB
Sample

240807-bw866sxaqk
MD5

ac547c1cc5fe5ef15d2087096cf80899
SHA1

b2ece917ce925084615123f81844051d5cd1bc3b
SHA256

a6cbadb3ad60ee331feff8c0138da2f6cf016d07547d6c2b366dfef02cef14ea
SHA512

15069351f165e0e358d2d5f4a8f977683c3ccee746e696bde1f70b4376ab252e025c75ca46c75a5e053fd1f4893fbef74fd92f581ebcbd595ff9982d57f854f7
SSDEEP

1536:wp4moSyBapiryZQf9SimDaQHrK8hRCRF47bDLr2C63ofYxduV9jojTIvjr:wpwBapYf9SVDay/hRCRF43Axd69jc0v

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6cbadb3ad60ee331feff8c0138da2f6cf016d07547d6c2b366dfef02cef14ea
- Size
  
  96KB
- MD5
  
  ac547c1cc5fe5ef15d2087096cf80899
- SHA1
  
  b2ece917ce925084615123f81844051d5cd1bc3b
- SHA256
  
  a6cbadb3ad60ee331feff8c0138da2f6cf016d07547d6c2b366dfef02cef14ea
- SHA512
  
  15069351f165e0e358d2d5f4a8f977683c3ccee746e696bde1f70b4376ab252e025c75ca46c75a5e053fd1f4893fbef74fd92f581ebcbd595ff9982d57f854f7
- SSDEEP
  
  1536:wp4moSyBapiryZQf9SimDaQHrK8hRCRF47bDLr2C63ofYxduV9jojTIvjr:wpwBapYf9SVDay/hRCRF43Axd69jc0v
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence