a433441d1cff54473ed0dd857e6444f3367242dbc55ae3100eb66be2c0704b11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a433441d1cff54473ed0dd857e6444f3367242dbc55ae3100eb66be2c0704b11
Size

99KB
Sample

240808-bzndwaxfqk
MD5

b2f7f21e24e1f83131644b7eaf998255
SHA1

b4a43819bc89fe6917136b6a077d3149659d13a9
SHA256

a433441d1cff54473ed0dd857e6444f3367242dbc55ae3100eb66be2c0704b11
SHA512

3efd74f45dc9b9570270e060c6996789d708f426d48bba1b2eb1f55143a43c99f4d4a9996f0730d8f47c05fbc2334ce387e6f35ee8b7af7069ff3de578e75b38
SSDEEP

1536:xGfWHhdQ9xinah5psVywQuXz9VYwVbLVFgblQQa3+om13XRzG:xGfE1ajp8mMJVYOrgb3a3+X13XRzG

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a433441d1cff54473ed0dd857e6444f3367242dbc55ae3100eb66be2c0704b11
- Size
  
  99KB
- MD5
  
  b2f7f21e24e1f83131644b7eaf998255
- SHA1
  
  b4a43819bc89fe6917136b6a077d3149659d13a9
- SHA256
  
  a433441d1cff54473ed0dd857e6444f3367242dbc55ae3100eb66be2c0704b11
- SHA512
  
  3efd74f45dc9b9570270e060c6996789d708f426d48bba1b2eb1f55143a43c99f4d4a9996f0730d8f47c05fbc2334ce387e6f35ee8b7af7069ff3de578e75b38
- SSDEEP
  
  1536:xGfWHhdQ9xinah5psVywQuXz9VYwVbLVFgblQQa3+om13XRzG:xGfE1ajp8mMJVYOrgb3a3+X13XRzG
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence