3e94042cea76baf678f66cd50b4b87e0ca2cc74782c121b6c5a759f7d1d36030 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e94042cea76baf678f66cd50b4b87e0ca2cc74782c121b6c5a759f7d1d36030
Size

391KB
Sample

240811-za8khs1clb
MD5

c851de7014b524374a4fb7c412ff43e2
SHA1

77210ab320f214c702a538e8dd9dd9a59b264394
SHA256

3e94042cea76baf678f66cd50b4b87e0ca2cc74782c121b6c5a759f7d1d36030
SHA512

bacde7f4398b82d87720bcd983d685f9e8de73a1f5c71748dbd45515db238e06df0fda82b3af5c8f11bd2005bba292c5a762e8e6bb921780a5be707a7d702fd6
SSDEEP

6144:LrxgPCUiaAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:LrxgPsmNtuhUNP3cOK3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3e94042cea76baf678f66cd50b4b87e0ca2cc74782c121b6c5a759f7d1d36030
- Size
  
  391KB
- MD5
  
  c851de7014b524374a4fb7c412ff43e2
- SHA1
  
  77210ab320f214c702a538e8dd9dd9a59b264394
- SHA256
  
  3e94042cea76baf678f66cd50b4b87e0ca2cc74782c121b6c5a759f7d1d36030
- SHA512
  
  bacde7f4398b82d87720bcd983d685f9e8de73a1f5c71748dbd45515db238e06df0fda82b3af5c8f11bd2005bba292c5a762e8e6bb921780a5be707a7d702fd6
- SSDEEP
  
  6144:LrxgPCUiaAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:LrxgPsmNtuhUNP3cOK3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence