d054594b3435ba2536ff31cf449ccbe9ebad03891784c59eea124724602bd7b8 | Triage

Sharing

General

Target

d054594b3435ba2536ff31cf449ccbe9ebad03891784c59eea124724602bd7b8
Size

128KB
Sample

240811-c4117svgmf
MD5

a7a1935633dd652cf657945240fe1567
SHA1

0cf17b11e3a6d51662825e4563e2c4ae9995d9e5
SHA256

d054594b3435ba2536ff31cf449ccbe9ebad03891784c59eea124724602bd7b8
SHA512

25759e05d0986f38071bcf8e3810f3fd6f989e902660ba49a160c02b4d6d28aa949e1890813266ab468b73c8455a860547e4c51f06111b5db7fda504928a136b
SSDEEP

3072:j3nnueqMhUA3gtlOeA57DxSvITW/cbFGS9n:j3nuyhUWgBA1hCw9n

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d054594b3435ba2536ff31cf449ccbe9ebad03891784c59eea124724602bd7b8
- Size
  
  128KB
- MD5
  
  a7a1935633dd652cf657945240fe1567
- SHA1
  
  0cf17b11e3a6d51662825e4563e2c4ae9995d9e5
- SHA256
  
  d054594b3435ba2536ff31cf449ccbe9ebad03891784c59eea124724602bd7b8
- SHA512
  
  25759e05d0986f38071bcf8e3810f3fd6f989e902660ba49a160c02b4d6d28aa949e1890813266ab468b73c8455a860547e4c51f06111b5db7fda504928a136b
- SSDEEP
  
  3072:j3nnueqMhUA3gtlOeA57DxSvITW/cbFGS9n:j3nuyhUWgBA1hCw9n
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence