8599c0ee2f972593d38003925f06ca217686418481182f393864a8f012908f2a | Triage

Sharing

General

Target

8599c0ee2f972593d38003925f06ca217686418481182f393864a8f012908f2a
Size

1.3MB
Sample

240808-ah2phawgmp
MD5

d409905037d0bfdcd4274f79807e1827
SHA1

075f1d7b91e4066fbbe2123603ca36128688e4de
SHA256

8599c0ee2f972593d38003925f06ca217686418481182f393864a8f012908f2a
SHA512

ff42683f0b09e93cfeb161c277f2a5d3379ea4b804c0fde4637e6c8ff8853b8dd2830ee5aa139894162efab030ffa5211c2df935c69fa2a0fbeefdc7e22f2f24
SSDEEP

12288:RXaT5QtAbaz22cWfVaw0HBHY8r8ABjMn:NatWsaK2cWfVaw0HB48r8ABY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8599c0ee2f972593d38003925f06ca217686418481182f393864a8f012908f2a
- Size
  
  1.3MB
- MD5
  
  d409905037d0bfdcd4274f79807e1827
- SHA1
  
  075f1d7b91e4066fbbe2123603ca36128688e4de
- SHA256
  
  8599c0ee2f972593d38003925f06ca217686418481182f393864a8f012908f2a
- SHA512
  
  ff42683f0b09e93cfeb161c277f2a5d3379ea4b804c0fde4637e6c8ff8853b8dd2830ee5aa139894162efab030ffa5211c2df935c69fa2a0fbeefdc7e22f2f24
- SSDEEP
  
  12288:RXaT5QtAbaz22cWfVaw0HBHY8r8ABjMn:NatWsaK2cWfVaw0HB48r8ABY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence