d81fd677025098d85f678122781c3cd1c2022485fba267b5f088fa90ae7fbe46 | Triage

Sharing

General

Target

d81fd677025098d85f678122781c3cd1c2022485fba267b5f088fa90ae7fbe46
Size

520KB
Sample

240817-gh4bnazflg
MD5

e6326d1fac4b54ce3fee2c8eea5c18fd
SHA1

52294dd88d8c32c9590aae3c7640dbd26b85021b
SHA256

d81fd677025098d85f678122781c3cd1c2022485fba267b5f088fa90ae7fbe46
SHA512

23f4b8835c9cf281065bb6cd2f379f94168188341548b7c93f0adde215e6e3639af4a695d39b6e757fdccf717f2bf37a23173899e83035bffef184472c7bb401
SSDEEP

6144:oCYnWlIFM6234lKm3mo8Yvi4KsLTFM6234lKm3r8SeNpgdyuH1lZfRo0V8JcgEH:rsFB24lwR45FB24lJ87g7/VycgEH

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d81fd677025098d85f678122781c3cd1c2022485fba267b5f088fa90ae7fbe46
- Size
  
  520KB
- MD5
  
  e6326d1fac4b54ce3fee2c8eea5c18fd
- SHA1
  
  52294dd88d8c32c9590aae3c7640dbd26b85021b
- SHA256
  
  d81fd677025098d85f678122781c3cd1c2022485fba267b5f088fa90ae7fbe46
- SHA512
  
  23f4b8835c9cf281065bb6cd2f379f94168188341548b7c93f0adde215e6e3639af4a695d39b6e757fdccf717f2bf37a23173899e83035bffef184472c7bb401
- SSDEEP
  
  6144:oCYnWlIFM6234lKm3mo8Yvi4KsLTFM6234lKm3r8SeNpgdyuH1lZfRo0V8JcgEH:rsFB24lwR45FB24lJ87g7/VycgEH
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence