8b1023863a898dd50589396befb304bbca9e218eadb4b8bec8ed8f73ef479111 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b1023863a898dd50589396befb304bbca9e218eadb4b8bec8ed8f73ef479111
Size

340KB
Sample

240817-b8h6hstelj
MD5

61832b3cf5852e0289187d005f463047
SHA1

a97fce893ae56cde962ad75cac2f8e38c3464737
SHA256

8b1023863a898dd50589396befb304bbca9e218eadb4b8bec8ed8f73ef479111
SHA512

3e2cc8a1fa5371881d2c517427796e2b24e651b2828bc43d65ba9fd187da7accf850ded7b0f98f00276d5c9b21f43c2a0be372926c217da43153a7bb764f2849
SSDEEP

6144:yFe6dQM1D3MG+77EoL3/fc/UmKyIxLDXXoq9FJZCUmKyIxLjh:ve71LP32XXf9Do3i

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8b1023863a898dd50589396befb304bbca9e218eadb4b8bec8ed8f73ef479111
- Size
  
  340KB
- MD5
  
  61832b3cf5852e0289187d005f463047
- SHA1
  
  a97fce893ae56cde962ad75cac2f8e38c3464737
- SHA256
  
  8b1023863a898dd50589396befb304bbca9e218eadb4b8bec8ed8f73ef479111
- SHA512
  
  3e2cc8a1fa5371881d2c517427796e2b24e651b2828bc43d65ba9fd187da7accf850ded7b0f98f00276d5c9b21f43c2a0be372926c217da43153a7bb764f2849
- SSDEEP
  
  6144:yFe6dQM1D3MG+77EoL3/fc/UmKyIxLDXXoq9FJZCUmKyIxLjh:ve71LP32XXf9Do3i
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence