91d10acf0e1b37f7bf99e45f4c661f9880e527651a3c73ee349bf8bad16ae5f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91d10acf0e1b37f7bf99e45f4c661f9880e527651a3c73ee349bf8bad16ae5f4
Size

109KB
Sample

240818-cglm1asdqj
MD5

e18b665d772689ca6c00d9857ee13d98
SHA1

112a3ab9629b13ea86c8e59daf7a37e04e109947
SHA256

91d10acf0e1b37f7bf99e45f4c661f9880e527651a3c73ee349bf8bad16ae5f4
SHA512

1fb3ab9a178a437e90ae3e327cc7b93c1e0a85e296f14db5f6dad1c5ceffdc8c929a6e6b9220c0e9cb78c887e84b24b953d3e1d0800ee222caff09488613e6e8
SSDEEP

3072:vQUTnM1BY5udYZjB41bZrJ9xLCqwzBu1DjHLMVDqqkSpR:dTM85uA14rJ9Zwtu1DjrFqhz

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  91d10acf0e1b37f7bf99e45f4c661f9880e527651a3c73ee349bf8bad16ae5f4
- Size
  
  109KB
- MD5
  
  e18b665d772689ca6c00d9857ee13d98
- SHA1
  
  112a3ab9629b13ea86c8e59daf7a37e04e109947
- SHA256
  
  91d10acf0e1b37f7bf99e45f4c661f9880e527651a3c73ee349bf8bad16ae5f4
- SHA512
  
  1fb3ab9a178a437e90ae3e327cc7b93c1e0a85e296f14db5f6dad1c5ceffdc8c929a6e6b9220c0e9cb78c887e84b24b953d3e1d0800ee222caff09488613e6e8
- SSDEEP
  
  3072:vQUTnM1BY5udYZjB41bZrJ9xLCqwzBu1DjHLMVDqqkSpR:dTM85uA14rJ9Zwtu1DjrFqhz
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence