ce263eb947017f06ebac021eb375cf1a417fcd0c827de4d2dad6d7d568a351f9 | Triage

Sharing

General

Target

ce263eb947017f06ebac021eb375cf1a417fcd0c827de4d2dad6d7d568a351f9
Size

192KB
Sample

240811-c1hepavfkd
MD5

9f6492f619542eab745c1b26794ae9e3
SHA1

0047409222793e0435561853f8ef9d8152b80a7a
SHA256

ce263eb947017f06ebac021eb375cf1a417fcd0c827de4d2dad6d7d568a351f9
SHA512

c5398aff4b21d88dc2fbb67e10687d9c9aa43426f947afaf950ce7c2f24e13fb16a23d1e3bee830fc96b7c6110e3f1b53892d461a2296a62a45626f8086373ee
SSDEEP

3072:sJVprhizRNJVucr242B1xdLm102VZjuajDMyap9jCyFsWtex:wEzRNnnr242B1xBm102VQltex

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ce263eb947017f06ebac021eb375cf1a417fcd0c827de4d2dad6d7d568a351f9
- Size
  
  192KB
- MD5
  
  9f6492f619542eab745c1b26794ae9e3
- SHA1
  
  0047409222793e0435561853f8ef9d8152b80a7a
- SHA256
  
  ce263eb947017f06ebac021eb375cf1a417fcd0c827de4d2dad6d7d568a351f9
- SHA512
  
  c5398aff4b21d88dc2fbb67e10687d9c9aa43426f947afaf950ce7c2f24e13fb16a23d1e3bee830fc96b7c6110e3f1b53892d461a2296a62a45626f8086373ee
- SSDEEP
  
  3072:sJVprhizRNJVucr242B1xdLm102VZjuajDMyap9jCyFsWtex:wEzRNnnr242B1xBm102VQltex
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence