63091dd68df7718280e553ee5c5b77b6650cf212e443ebf2b2a4c7b9c7639e89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63091dd68df7718280e553ee5c5b77b6650cf212e443ebf2b2a4c7b9c7639e89
Size

400KB
Sample

240809-13ba6awanb
MD5

f396becfd7b391bd2b76ccf147630638
SHA1

638eb1c20c839a8bbf29b60f4e6c1191b7d2149c
SHA256

63091dd68df7718280e553ee5c5b77b6650cf212e443ebf2b2a4c7b9c7639e89
SHA512

16c1dcf8b91705ea983da2d47af08eee14af9c507dcd38e18455916b387ffbb4a1b1d50c0f69f438fb92394f894ff90f798c55662206ba4ae22223aa6dcffc32
SSDEEP

6144:2/y5dLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:2/IRrgryg426RQagrkj

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  63091dd68df7718280e553ee5c5b77b6650cf212e443ebf2b2a4c7b9c7639e89
- Size
  
  400KB
- MD5
  
  f396becfd7b391bd2b76ccf147630638
- SHA1
  
  638eb1c20c839a8bbf29b60f4e6c1191b7d2149c
- SHA256
  
  63091dd68df7718280e553ee5c5b77b6650cf212e443ebf2b2a4c7b9c7639e89
- SHA512
  
  16c1dcf8b91705ea983da2d47af08eee14af9c507dcd38e18455916b387ffbb4a1b1d50c0f69f438fb92394f894ff90f798c55662206ba4ae22223aa6dcffc32
- SSDEEP
  
  6144:2/y5dLAY/Xr4Br3CbArLAZ26RQ8sY6CbArLAY/9bPk6Cbv:2/IRrgryg426RQagrkj
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence