37f4f28de044307f92efe252758c864849e057b4ff164e2bdc6779760f785b76 | Triage

Sharing

General

Target

37f4f28de044307f92efe252758c864849e057b4ff164e2bdc6779760f785b76
Size

264KB
Sample

240807-zhpglsxcrb
MD5

c5c5eaf2f62791f2fcc4c0095d2180a8
SHA1

24db8f538a3c5143044356123450596838fb13a7
SHA256

37f4f28de044307f92efe252758c864849e057b4ff164e2bdc6779760f785b76
SHA512

32cc2a28e23467cfd4624761a9427156befeb4d3733b5d629f196c5d3e6db5e199493b72bec9d8080c60b85a69a441d730da71e993362c2b569d3bd8aa11083c
SSDEEP

6144:99rXEEEEEEEVIIsFj5tPNki9HZd1sFj5tw:9FXEEEEEEEBs15tPWu5Ls15tw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  37f4f28de044307f92efe252758c864849e057b4ff164e2bdc6779760f785b76
- Size
  
  264KB
- MD5
  
  c5c5eaf2f62791f2fcc4c0095d2180a8
- SHA1
  
  24db8f538a3c5143044356123450596838fb13a7
- SHA256
  
  37f4f28de044307f92efe252758c864849e057b4ff164e2bdc6779760f785b76
- SHA512
  
  32cc2a28e23467cfd4624761a9427156befeb4d3733b5d629f196c5d3e6db5e199493b72bec9d8080c60b85a69a441d730da71e993362c2b569d3bd8aa11083c
- SSDEEP
  
  6144:99rXEEEEEEEVIIsFj5tPNki9HZd1sFj5tw:9FXEEEEEEEBs15tPWu5Ls15tw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence