76cbf82ca8f184f56ae1d555b95ac3cd97b1c61a42b64f2e129766f7aa0ea9ea | Triage

Sharing

General

Target

76cbf82ca8f184f56ae1d555b95ac3cd97b1c61a42b64f2e129766f7aa0ea9ea
Size

256KB
Sample

240811-2np2faselm
MD5

ee14d6a00f58f7a73d6c599814f2313c
SHA1

73dc5a142c1d68569dfce05ffe812d258180d3b9
SHA256

76cbf82ca8f184f56ae1d555b95ac3cd97b1c61a42b64f2e129766f7aa0ea9ea
SHA512

46a3b620b69b30fdafd5c07fcf0843c1ae9fb3aaa36f7896f6a4299b3572988661b843658027be65f3d0d92bd948409cb33614a35248534dfda9edde2f63e0ba
SSDEEP

3072:MmN1TUSTWqAhELy1MTT6e5f7N+Awrogsw+STWqAhELy1MTT6e5fAKkVyerze:MmXUSTYaT15f7o+STYaT15fAK8yL

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  76cbf82ca8f184f56ae1d555b95ac3cd97b1c61a42b64f2e129766f7aa0ea9ea
- Size
  
  256KB
- MD5
  
  ee14d6a00f58f7a73d6c599814f2313c
- SHA1
  
  73dc5a142c1d68569dfce05ffe812d258180d3b9
- SHA256
  
  76cbf82ca8f184f56ae1d555b95ac3cd97b1c61a42b64f2e129766f7aa0ea9ea
- SHA512
  
  46a3b620b69b30fdafd5c07fcf0843c1ae9fb3aaa36f7896f6a4299b3572988661b843658027be65f3d0d92bd948409cb33614a35248534dfda9edde2f63e0ba
- SSDEEP
  
  3072:MmN1TUSTWqAhELy1MTT6e5f7N+Awrogsw+STWqAhELy1MTT6e5fAKkVyerze:MmXUSTYaT15f7o+STYaT15fAK8yL
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence