3063ba05c0d5a8b35fea2cc3b623468b31ae72300effc18f9d56ec47b7ba2e2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3063ba05c0d5a8b35fea2cc3b623468b31ae72300effc18f9d56ec47b7ba2e2a
Size

224KB
Sample

240813-x9zqjsxakr
MD5

c729ef83add82acd75a8e4cb7e469bd7
SHA1

b7a513f578b3183cc99250909c12134bcbb15cb7
SHA256

3063ba05c0d5a8b35fea2cc3b623468b31ae72300effc18f9d56ec47b7ba2e2a
SHA512

4ab4e60572196a970a4ce2907484b97ff666bc52042677a723b7e0edda57249e6f76a8f04a3c37ebc0558c560df4a552ad4b339f52edcad6ce184d26f023a631
SSDEEP

6144:3Ea9u7VRI/JbbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQcv:Ua9u7VR+bWGRdA6sQhPbWGRdA6sQc

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3063ba05c0d5a8b35fea2cc3b623468b31ae72300effc18f9d56ec47b7ba2e2a
- Size
  
  224KB
- MD5
  
  c729ef83add82acd75a8e4cb7e469bd7
- SHA1
  
  b7a513f578b3183cc99250909c12134bcbb15cb7
- SHA256
  
  3063ba05c0d5a8b35fea2cc3b623468b31ae72300effc18f9d56ec47b7ba2e2a
- SHA512
  
  4ab4e60572196a970a4ce2907484b97ff666bc52042677a723b7e0edda57249e6f76a8f04a3c37ebc0558c560df4a552ad4b339f52edcad6ce184d26f023a631
- SSDEEP
  
  6144:3Ea9u7VRI/JbbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQcv:Ua9u7VR+bWGRdA6sQhPbWGRdA6sQc
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence