3027be007c81406f932c25093884167f3b9efc55bb74647f3f213c83ef3e18d0 | Triage

Sharing

General

Target

3027be007c81406f932c25093884167f3b9efc55bb74647f3f213c83ef3e18d0
Size

451KB
Sample

240810-yw9t2azeqe
MD5

72fd08d4b1f063aaf7ed6229ff6c0cda
SHA1

1e3c00b60981881f798a37a0e9c042058e17a517
SHA256

3027be007c81406f932c25093884167f3b9efc55bb74647f3f213c83ef3e18d0
SHA512

ea324e2e7160646f44e6598daf50e3f70806a4fb7ecd7953e5603f515645abdbbee5b1bce50048368b85b440b3998d06c3c621723035711f947971a90db41b2e
SSDEEP

6144:y+VjzAPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:3Vp/NcZ7/NC64tm6Y

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3027be007c81406f932c25093884167f3b9efc55bb74647f3f213c83ef3e18d0
- Size
  
  451KB
- MD5
  
  72fd08d4b1f063aaf7ed6229ff6c0cda
- SHA1
  
  1e3c00b60981881f798a37a0e9c042058e17a517
- SHA256
  
  3027be007c81406f932c25093884167f3b9efc55bb74647f3f213c83ef3e18d0
- SHA512
  
  ea324e2e7160646f44e6598daf50e3f70806a4fb7ecd7953e5603f515645abdbbee5b1bce50048368b85b440b3998d06c3c621723035711f947971a90db41b2e
- SSDEEP
  
  6144:y+VjzAPQ///NR5fLYG3eujPQ///NR5fqZo4tjS6Y:3Vp/NcZ7/NC64tm6Y
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence