2798f944f1b16a2177e2a2d5c1952b01cca7775fc33e7c12e8dc5918300b20f5 | Triage

Sharing

General

Target

2798f944f1b16a2177e2a2d5c1952b01cca7775fc33e7c12e8dc5918300b20f5
Size

347KB
Sample

240818-ycrt4stfjk
MD5

af17a97b39cc323171ba1d47d21404f9
SHA1

b5242ba045c51c87221148f613ef96ba1a9fbf4c
SHA256

2798f944f1b16a2177e2a2d5c1952b01cca7775fc33e7c12e8dc5918300b20f5
SHA512

c93cfe3c1c4a1181e58e138eecb251c90faeaba96e759a844f149fb3f9fdb68e4aff7666dd61ad9728d23de617b07e27d533069724205213f88f1f9cdbe81a5d
SSDEEP

6144:Hd1rZjgU5vx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:9zRx4brRGFB24lwR45FB24lEk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2798f944f1b16a2177e2a2d5c1952b01cca7775fc33e7c12e8dc5918300b20f5
- Size
  
  347KB
- MD5
  
  af17a97b39cc323171ba1d47d21404f9
- SHA1
  
  b5242ba045c51c87221148f613ef96ba1a9fbf4c
- SHA256
  
  2798f944f1b16a2177e2a2d5c1952b01cca7775fc33e7c12e8dc5918300b20f5
- SHA512
  
  c93cfe3c1c4a1181e58e138eecb251c90faeaba96e759a844f149fb3f9fdb68e4aff7666dd61ad9728d23de617b07e27d533069724205213f88f1f9cdbe81a5d
- SSDEEP
  
  6144:Hd1rZjgU5vx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:9zRx4brRGFB24lwR45FB24lEk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence