7f9e8062276124f0a7651dcdb24bdd4972bb87c040021aa4342108dd98bc4325 | Triage

Sharing

General

Target

7f9e8062276124f0a7651dcdb24bdd4972bb87c040021aa4342108dd98bc4325
Size

384KB
Sample

240811-2243hsxfqf
MD5

bac43396acfbd0428e7471e341a167fc
SHA1

a992db617d294d9b81dcc038cec0a2ebeb5d56b2
SHA256

7f9e8062276124f0a7651dcdb24bdd4972bb87c040021aa4342108dd98bc4325
SHA512

9144a48defb3ac7db86b1501c13eae07bb39699f83e0236d8824a1ab12c264fedee2a09aaa8169e24376486517161c0ee1f4e1b8c03b318282e9b8c9b9d3dbaa
SSDEEP

6144:PtP6HhZRpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GA0:0JpV6yYPI3cpV6yYPZ0PVdvcY9+8hk50

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7f9e8062276124f0a7651dcdb24bdd4972bb87c040021aa4342108dd98bc4325
- Size
  
  384KB
- MD5
  
  bac43396acfbd0428e7471e341a167fc
- SHA1
  
  a992db617d294d9b81dcc038cec0a2ebeb5d56b2
- SHA256
  
  7f9e8062276124f0a7651dcdb24bdd4972bb87c040021aa4342108dd98bc4325
- SHA512
  
  9144a48defb3ac7db86b1501c13eae07bb39699f83e0236d8824a1ab12c264fedee2a09aaa8169e24376486517161c0ee1f4e1b8c03b318282e9b8c9b9d3dbaa
- SSDEEP
  
  6144:PtP6HhZRpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GA0:0JpV6yYPI3cpV6yYPZ0PVdvcY9+8hk50
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence