94007b818b463645deeaa43a8b91ae45a7f69cc7f95b73a780a433e25af83fb9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

94007b818b463645deeaa43a8b91ae45a7f69cc7f95b73a780a433e25af83fb9
Size

64KB
Sample

240809-ab6d4ssgkm
MD5

af122083412f6b68495f71adee04eb00
SHA1

08797a1ea5c13217fccd97810c1f3d0e071463c4
SHA256

94007b818b463645deeaa43a8b91ae45a7f69cc7f95b73a780a433e25af83fb9
SHA512

17480faf3e7725e0f8b896096b3a2b365dad1b452745315bc3a55e4a98aa340dbf1082e07cf3223e5625a489c9529541027d33edfd94486526c51868389cd377
SSDEEP

1536:66SUOR903CNoSGZNp6721cOwcxawtrQ19s6TrSXytjPeO6XKhbMbt2:kmCVG8Of7Xy6O6Xjt2

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  94007b818b463645deeaa43a8b91ae45a7f69cc7f95b73a780a433e25af83fb9
- Size
  
  64KB
- MD5
  
  af122083412f6b68495f71adee04eb00
- SHA1
  
  08797a1ea5c13217fccd97810c1f3d0e071463c4
- SHA256
  
  94007b818b463645deeaa43a8b91ae45a7f69cc7f95b73a780a433e25af83fb9
- SHA512
  
  17480faf3e7725e0f8b896096b3a2b365dad1b452745315bc3a55e4a98aa340dbf1082e07cf3223e5625a489c9529541027d33edfd94486526c51868389cd377
- SSDEEP
  
  1536:66SUOR903CNoSGZNp6721cOwcxawtrQ19s6TrSXytjPeO6XKhbMbt2:kmCVG8Of7Xy6O6Xjt2
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence