ab1d4500859ec412693cbffcd5bf260c79a119f8531e1b0bdfa78bd8e733c868 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab1d4500859ec412693cbffcd5bf260c79a119f8531e1b0bdfa78bd8e733c868
Size

1.9MB
Sample

240808-cca1psxhnk
MD5

bfc8fc954a0fed9a9f60a4e38e7bb3bd
SHA1

d81e84433bb32050e7d8df573f1be3971b37e228
SHA256

ab1d4500859ec412693cbffcd5bf260c79a119f8531e1b0bdfa78bd8e733c868
SHA512

bee2e81a8c18a79f5be7143e57b4b1b79c29b326b8849aaece57a39e4e087326bbc4a2faa8c116351d7b136c29b3e85100b0487971cd75958109937ac356c277
SSDEEP

6144:nijBzFuTPQ///NR5fKr2n0MCRqJ++6yYEwPJ2kEe16L9Jww61EvBqc:nQh/Ni+6CwUkEoILTAc

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ab1d4500859ec412693cbffcd5bf260c79a119f8531e1b0bdfa78bd8e733c868
- Size
  
  1.9MB
- MD5
  
  bfc8fc954a0fed9a9f60a4e38e7bb3bd
- SHA1
  
  d81e84433bb32050e7d8df573f1be3971b37e228
- SHA256
  
  ab1d4500859ec412693cbffcd5bf260c79a119f8531e1b0bdfa78bd8e733c868
- SHA512
  
  bee2e81a8c18a79f5be7143e57b4b1b79c29b326b8849aaece57a39e4e087326bbc4a2faa8c116351d7b136c29b3e85100b0487971cd75958109937ac356c277
- SSDEEP
  
  6144:nijBzFuTPQ///NR5fKr2n0MCRqJ++6yYEwPJ2kEe16L9Jww61EvBqc:nQh/Ni+6CwUkEoILTAc
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence