e4c44346b1048e720a41bf0fae1d89570e5eee0ef76b586063cdb820017bc36a | Triage

Sharing

General

Target

e4c44346b1048e720a41bf0fae1d89570e5eee0ef76b586063cdb820017bc36a
Size

304KB
Sample

240812-d28hyaxfkb
MD5

d49b6976a55291a6e842ec2dcbf64027
SHA1

77c317624f9e8c3c4a6be3a61752684489636007
SHA256

e4c44346b1048e720a41bf0fae1d89570e5eee0ef76b586063cdb820017bc36a
SHA512

dd517f53fecb83a050317a8b329f35030c9f47acd41f1c0149610dee29709e9873730d9dd72fbd9020c857e13205c3b91cd6e29bb952758532b74f1eca1682c5
SSDEEP

6144:mwyo8/eJ8NxunXe8yhrtMsQBvli+RQFdq:mvo8JvAO8qRMsrOQF

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e4c44346b1048e720a41bf0fae1d89570e5eee0ef76b586063cdb820017bc36a
- Size
  
  304KB
- MD5
  
  d49b6976a55291a6e842ec2dcbf64027
- SHA1
  
  77c317624f9e8c3c4a6be3a61752684489636007
- SHA256
  
  e4c44346b1048e720a41bf0fae1d89570e5eee0ef76b586063cdb820017bc36a
- SHA512
  
  dd517f53fecb83a050317a8b329f35030c9f47acd41f1c0149610dee29709e9873730d9dd72fbd9020c857e13205c3b91cd6e29bb952758532b74f1eca1682c5
- SSDEEP
  
  6144:mwyo8/eJ8NxunXe8yhrtMsQBvli+RQFdq:mvo8JvAO8qRMsrOQF
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence