6fb5509b71cfdd3ac59431d7e4b97db1ed91daa2ca5481aa9c9dd7ad848145f0 | Triage

Sharing

General

Target

6fb5509b71cfdd3ac59431d7e4b97db1ed91daa2ca5481aa9c9dd7ad848145f0
Size

2.7MB
Sample

240810-2nkfysweke
MD5

3537b2e7b46a0f1a2cfd6bd8c51d3a9a
SHA1

5abf1b26db7fc08ad1a83c9bc681cb55b0f5d87c
SHA256

6fb5509b71cfdd3ac59431d7e4b97db1ed91daa2ca5481aa9c9dd7ad848145f0
SHA512

22f00b81e2e57bc132de3648da242b20c950277cfe400fe8b4c07214fe4af2f21087c33d38fe62b0a79c0c9a1497d9b6bf29525cc675a62f0f910f37c7cd984d
SSDEEP

49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBm9w4Sx:+R0pI/IQlUoMPdmpSp04

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  6fb5509b71cfdd3ac59431d7e4b97db1ed91daa2ca5481aa9c9dd7ad848145f0
- Size
  
  2.7MB
- MD5
  
  3537b2e7b46a0f1a2cfd6bd8c51d3a9a
- SHA1
  
  5abf1b26db7fc08ad1a83c9bc681cb55b0f5d87c
- SHA256
  
  6fb5509b71cfdd3ac59431d7e4b97db1ed91daa2ca5481aa9c9dd7ad848145f0
- SHA512
  
  22f00b81e2e57bc132de3648da242b20c950277cfe400fe8b4c07214fe4af2f21087c33d38fe62b0a79c0c9a1497d9b6bf29525cc675a62f0f910f37c7cd984d
- SSDEEP
  
  49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LBm9w4Sx:+R0pI/IQlUoMPdmpSp04
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence