de84f06c2e67f2827d840fa77fd46af5b3262ca2225d1b0dbb84f7da215f181c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de84f06c2e67f2827d840fa77fd46af5b3262ca2225d1b0dbb84f7da215f181c
Size

320KB
Sample

240817-gv2cts1cja
MD5

b6546cd4de67d6abccef54aa1b3f4c9f
SHA1

905a239c6fb209d824794bb498e333f74d09979f
SHA256

de84f06c2e67f2827d840fa77fd46af5b3262ca2225d1b0dbb84f7da215f181c
SHA512

23c052e597458363b96e11f933c8bdae1ca65e8005b5b396d53049ed83a7dd198a4c104d9597d175c011c407c36b8e557db6dd8ff3d7dd9b94dfa63e1ab920ee
SSDEEP

6144:+N0hctHvlIY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:jhQHvtm05XEvG6IveDVqvQ6IvP

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  de84f06c2e67f2827d840fa77fd46af5b3262ca2225d1b0dbb84f7da215f181c
- Size
  
  320KB
- MD5
  
  b6546cd4de67d6abccef54aa1b3f4c9f
- SHA1
  
  905a239c6fb209d824794bb498e333f74d09979f
- SHA256
  
  de84f06c2e67f2827d840fa77fd46af5b3262ca2225d1b0dbb84f7da215f181c
- SHA512
  
  23c052e597458363b96e11f933c8bdae1ca65e8005b5b396d53049ed83a7dd198a4c104d9597d175c011c407c36b8e557db6dd8ff3d7dd9b94dfa63e1ab920ee
- SSDEEP
  
  6144:+N0hctHvlIY/m05XUEtMEX6vluZV4U/vlf0DrBqvl8ZV4U/vlfl+9Q:jhQHvtm05XEvG6IveDVqvQ6IvP
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence