3c81f57c911797035086e15fecad0038eb1f658139d21db8097fcd63a740da68 | Triage

Sharing

General

Target

3c81f57c911797035086e15fecad0038eb1f658139d21db8097fcd63a740da68
Size

896KB
Sample

240810-zg2qjsxcjq
MD5

791e0dacd65f2790525de34c3e18d847
SHA1

522bf773db0f14f2ec2235ba5b812877e5f8fff2
SHA256

3c81f57c911797035086e15fecad0038eb1f658139d21db8097fcd63a740da68
SHA512

ae0783a8e6d15a2933709667dad720e0fd0d899c166e60723c3349ca5e4645948ace08cbbd394c6a09ab9e3e44d383b903d1017f61ce3cf12676ca4b29897e72
SSDEEP

12288:8utWwByvNv54B9f01ZmHByvNv5VwLonfBHLqF1Nw5ILonfByvNv5HV:BWvvr4B9f01ZmQvrUENOVvr1

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3c81f57c911797035086e15fecad0038eb1f658139d21db8097fcd63a740da68
- Size
  
  896KB
- MD5
  
  791e0dacd65f2790525de34c3e18d847
- SHA1
  
  522bf773db0f14f2ec2235ba5b812877e5f8fff2
- SHA256
  
  3c81f57c911797035086e15fecad0038eb1f658139d21db8097fcd63a740da68
- SHA512
  
  ae0783a8e6d15a2933709667dad720e0fd0d899c166e60723c3349ca5e4645948ace08cbbd394c6a09ab9e3e44d383b903d1017f61ce3cf12676ca4b29897e72
- SSDEEP
  
  12288:8utWwByvNv54B9f01ZmHByvNv5VwLonfBHLqF1Nw5ILonfByvNv5HV:BWvvr4B9f01ZmQvrUENOVvr1
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence