351d99a172f221e8d705dfa7a31aa570c61b882e0eecd6bdd4743421fe0d95c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

351d99a172f221e8d705dfa7a31aa570c61b882e0eecd6bdd4743421fe0d95c1
Size

96KB
Sample

240807-zcg6catejr
MD5

1d833f83373d3dcc433a2e50b8c1da3f
SHA1

8be7992c6c351cf6d6d5cb21e5f4c49de20b9b61
SHA256

351d99a172f221e8d705dfa7a31aa570c61b882e0eecd6bdd4743421fe0d95c1
SHA512

ead1d20a6bf52e0e829c3f96139070dbd368fed9923b10c6e2c8731ac716e931154719408df4b2b048f1dbf07917e7f6f5991471feb1d29446430e6c8f18cdc3
SSDEEP

1536:tTNsrqT6wlr5agEx2NG9p1Yd58i4f4iQizB5e9MbinV39+ChnSdFFn7Elz45zFVI:Wmt8gm2YfZj5AMbqV39ThSdn7Elz45PI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  351d99a172f221e8d705dfa7a31aa570c61b882e0eecd6bdd4743421fe0d95c1
- Size
  
  96KB
- MD5
  
  1d833f83373d3dcc433a2e50b8c1da3f
- SHA1
  
  8be7992c6c351cf6d6d5cb21e5f4c49de20b9b61
- SHA256
  
  351d99a172f221e8d705dfa7a31aa570c61b882e0eecd6bdd4743421fe0d95c1
- SHA512
  
  ead1d20a6bf52e0e829c3f96139070dbd368fed9923b10c6e2c8731ac716e931154719408df4b2b048f1dbf07917e7f6f5991471feb1d29446430e6c8f18cdc3
- SSDEEP
  
  1536:tTNsrqT6wlr5agEx2NG9p1Yd58i4f4iQizB5e9MbinV39+ChnSdFFn7Elz45zFVI:Wmt8gm2YfZj5AMbqV39ThSdn7Elz45PI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence