9bf9f823daa0751bdfee23375c24c908f3e41f995c0807a8b9a78b1db4e16c56 | Triage

Sharing

General

Target

9bf9f823daa0751bdfee23375c24c908f3e41f995c0807a8b9a78b1db4e16c56
Size

81KB
Sample

240817-c7zmjsshkd
MD5

a29ca930e740e838ac07e026805bc1a3
SHA1

6ee0084f4784a2dcf0df0e89a61f5bf0233fbcb8
SHA256

9bf9f823daa0751bdfee23375c24c908f3e41f995c0807a8b9a78b1db4e16c56
SHA512

e7b3d8d8eaf3342b95e40dccfe3312a88ed5f6c2cc5db33ae0919182324545b4c66abc55aeb9bf93481e80f44c44385a240e2f760f67e009cc2618395edc1521
SSDEEP

1536:B/dfrg6mIl/rj7saAZeHLbCIlPCXUtaX7m4LO++/+1m6KadhYxU33HX0L:11r2IlDHLAFX/LrCimBaH8UH30L

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9bf9f823daa0751bdfee23375c24c908f3e41f995c0807a8b9a78b1db4e16c56
- Size
  
  81KB
- MD5
  
  a29ca930e740e838ac07e026805bc1a3
- SHA1
  
  6ee0084f4784a2dcf0df0e89a61f5bf0233fbcb8
- SHA256
  
  9bf9f823daa0751bdfee23375c24c908f3e41f995c0807a8b9a78b1db4e16c56
- SHA512
  
  e7b3d8d8eaf3342b95e40dccfe3312a88ed5f6c2cc5db33ae0919182324545b4c66abc55aeb9bf93481e80f44c44385a240e2f760f67e009cc2618395edc1521
- SSDEEP
  
  1536:B/dfrg6mIl/rj7saAZeHLbCIlPCXUtaX7m4LO++/+1m6KadhYxU33HX0L:11r2IlDHLAFX/LrCimBaH8UH30L
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence