405c92a714837023532a248804078a101a7c040f0558b8c96e947c027da60739 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

405c92a714837023532a248804078a101a7c040f0558b8c96e947c027da60739
Size

94KB
Sample

240807-zwj42sxfjc
MD5

81429e090601360081c08b3b00a33638
SHA1

d3e0f4a615837aeeaaa7b90aaec0e64d80bba7a0
SHA256

405c92a714837023532a248804078a101a7c040f0558b8c96e947c027da60739
SHA512

8192a2d3d0c6e5ec9fb7f2c64da0aac7efcdd8a2da1c04e17d1eb92c4f8f0f8ee95a74c457fdcd129a98941bd5ae02814b701f86a29c835f75f92327e85465df
SSDEEP

1536:1sy4WctAvxHIKR6Xjms8oUirpPXgPsJ48QRQDYRfRa9HprmRfRZ:1UF6oKR6XjZ8ovHCeDY5wkpv

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  405c92a714837023532a248804078a101a7c040f0558b8c96e947c027da60739
- Size
  
  94KB
- MD5
  
  81429e090601360081c08b3b00a33638
- SHA1
  
  d3e0f4a615837aeeaaa7b90aaec0e64d80bba7a0
- SHA256
  
  405c92a714837023532a248804078a101a7c040f0558b8c96e947c027da60739
- SHA512
  
  8192a2d3d0c6e5ec9fb7f2c64da0aac7efcdd8a2da1c04e17d1eb92c4f8f0f8ee95a74c457fdcd129a98941bd5ae02814b701f86a29c835f75f92327e85465df
- SSDEEP
  
  1536:1sy4WctAvxHIKR6Xjms8oUirpPXgPsJ48QRQDYRfRa9HprmRfRZ:1UF6oKR6XjZ8ovHCeDY5wkpv
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence