0d8a6e6f463fc5e9fedab30a57c1eb158bf753cf7f6fa6e1e3aaaecadb0fab49 | Triage

Sharing

General

Target

0d8a6e6f463fc5e9fedab30a57c1eb158bf753cf7f6fa6e1e3aaaecadb0fab49
Size

1.4MB
Sample

240818-xahmzs1drj
MD5

e73a8767b1e1e569eff9e3433b8f1e05
SHA1

01b08ee45415cc6b55e93a103e6953d9516c5827
SHA256

0d8a6e6f463fc5e9fedab30a57c1eb158bf753cf7f6fa6e1e3aaaecadb0fab49
SHA512

2c1a2341b06511d5031569a95699d1d2cd639c6ecf812a59df983026928701efe714451b586e3cb2b9248e1066c85efa6dcd89c1c7f2cbea67954c3a0053250c
SSDEEP

24576:bKc9uOosKYthW+sKYtnc9uOp1c9uOosKYthW+sKYtnc9uOosKYt:bHuOosKWDsKWcuOMuOosKWDsKWcuOosb

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0d8a6e6f463fc5e9fedab30a57c1eb158bf753cf7f6fa6e1e3aaaecadb0fab49
- Size
  
  1.4MB
- MD5
  
  e73a8767b1e1e569eff9e3433b8f1e05
- SHA1
  
  01b08ee45415cc6b55e93a103e6953d9516c5827
- SHA256
  
  0d8a6e6f463fc5e9fedab30a57c1eb158bf753cf7f6fa6e1e3aaaecadb0fab49
- SHA512
  
  2c1a2341b06511d5031569a95699d1d2cd639c6ecf812a59df983026928701efe714451b586e3cb2b9248e1066c85efa6dcd89c1c7f2cbea67954c3a0053250c
- SSDEEP
  
  24576:bKc9uOosKYthW+sKYtnc9uOp1c9uOosKYthW+sKYtnc9uOosKYt:bHuOosKWDsKWcuOMuOosKWDsKWcuOosb
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence