322c5a6399ff024393e162ac5a026480eb1348c21c75cbc91cd926d218c3f67e | Triage

Sharing

General

Target

322c5a6399ff024393e162ac5a026480eb1348c21c75cbc91cd926d218c3f67e
Size

404KB
Sample

240816-zqktdswglc
MD5

c7e0f262221cbfb74b3b43a9dead1d02
SHA1

f8d6b5c115a3c78ee3b1c5b64e53fa7d8476f10a
SHA256

322c5a6399ff024393e162ac5a026480eb1348c21c75cbc91cd926d218c3f67e
SHA512

2e99ef18db3d315d3875b990524622cf058981464429de59394eb8078a8b96df43124a464fb5367d3de3e5cd9661cbff87b3a3cf79bcf64a2c8df9f7ead38ae9
SSDEEP

6144:k1NcNhuovENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:UqAlwcMpV6yYP4rbpV6yYPg058KS

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  322c5a6399ff024393e162ac5a026480eb1348c21c75cbc91cd926d218c3f67e
- Size
  
  404KB
- MD5
  
  c7e0f262221cbfb74b3b43a9dead1d02
- SHA1
  
  f8d6b5c115a3c78ee3b1c5b64e53fa7d8476f10a
- SHA256
  
  322c5a6399ff024393e162ac5a026480eb1348c21c75cbc91cd926d218c3f67e
- SHA512
  
  2e99ef18db3d315d3875b990524622cf058981464429de59394eb8078a8b96df43124a464fb5367d3de3e5cd9661cbff87b3a3cf79bcf64a2c8df9f7ead38ae9
- SSDEEP
  
  6144:k1NcNhuovENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:UqAlwcMpV6yYP4rbpV6yYPg058KS
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence