cef2ace3caf5f36990c4fbd3e22d4fabb6fc24000811d3e1a28626170897d157 | Triage

Sharing

General

Target

cef2ace3caf5f36990c4fbd3e22d4fabb6fc24000811d3e1a28626170897d157
Size

160KB
Sample

240817-f3fwessdmr
MD5

fcf94ca3261b306e5d6a7fb3340c2f0d
SHA1

7d054ce5103c258a9b927c49cdb74fb2472f51c4
SHA256

cef2ace3caf5f36990c4fbd3e22d4fabb6fc24000811d3e1a28626170897d157
SHA512

4728327993946fb0720de131c66e0d6f13b685d26ff91c5f936d2044bc87a9b7c24ec91233bc7e726f79faf9c7a814c79e7e1c9792166167a37686d860b366cd
SSDEEP

3072:eK2XOcab+pqNj6+JB8M6m9jqLsFmsdYXmLZ:eK2ecW+ENj6MB8MhjwszeXmF

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  cef2ace3caf5f36990c4fbd3e22d4fabb6fc24000811d3e1a28626170897d157
- Size
  
  160KB
- MD5
  
  fcf94ca3261b306e5d6a7fb3340c2f0d
- SHA1
  
  7d054ce5103c258a9b927c49cdb74fb2472f51c4
- SHA256
  
  cef2ace3caf5f36990c4fbd3e22d4fabb6fc24000811d3e1a28626170897d157
- SHA512
  
  4728327993946fb0720de131c66e0d6f13b685d26ff91c5f936d2044bc87a9b7c24ec91233bc7e726f79faf9c7a814c79e7e1c9792166167a37686d860b366cd
- SSDEEP
  
  3072:eK2XOcab+pqNj6+JB8M6m9jqLsFmsdYXmLZ:eK2ecW+ENj6MB8MhjwszeXmF
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence