713aa0b813f6d15b89de7be17ef4e91e66a9229e4c349a1e2381a489a054eeba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

713aa0b813f6d15b89de7be17ef4e91e66a9229e4c349a1e2381a489a054eeba
Size

244KB
Sample

240808-2g62da1ell
MD5

6ee1cae61e96018f49a4c2f30d7d5ffe
SHA1

639601623509c7c01da1ef01147f285ca4b5ec5f
SHA256

713aa0b813f6d15b89de7be17ef4e91e66a9229e4c349a1e2381a489a054eeba
SHA512

e2825866e1dfa0de3138930e4546a5305c990fb0ba0c4d19826a888892f75d42c43b528503ff0b80ab6b4617b3d2d1ccd67cd20d69a92389e24a0eb82fa4f9b5
SSDEEP

6144:J26q3a1S/8gZtprtMsQBma/atn9pG4l+0K76zHTgb8ec1:nq3G6RMsEat9pG4l+0K7WHTd

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  713aa0b813f6d15b89de7be17ef4e91e66a9229e4c349a1e2381a489a054eeba
- Size
  
  244KB
- MD5
  
  6ee1cae61e96018f49a4c2f30d7d5ffe
- SHA1
  
  639601623509c7c01da1ef01147f285ca4b5ec5f
- SHA256
  
  713aa0b813f6d15b89de7be17ef4e91e66a9229e4c349a1e2381a489a054eeba
- SHA512
  
  e2825866e1dfa0de3138930e4546a5305c990fb0ba0c4d19826a888892f75d42c43b528503ff0b80ab6b4617b3d2d1ccd67cd20d69a92389e24a0eb82fa4f9b5
- SSDEEP
  
  6144:J26q3a1S/8gZtprtMsQBma/atn9pG4l+0K76zHTgb8ec1:nq3G6RMsEat9pG4l+0K7WHTd
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence