576170d3f00a7682a798de79ac71592e5f5d43e0a7a6b2b3a3285c96dc189379 | Triage

Sharing

General

Target

576170d3f00a7682a798de79ac71592e5f5d43e0a7a6b2b3a3285c96dc189379
Size

664KB
Sample

240818-z6tfgaxhqq
MD5

574c0020210a4baac954996842fc3520
SHA1

0991127381afaa2c6fc4d9fb3e6a0a378248f8b5
SHA256

576170d3f00a7682a798de79ac71592e5f5d43e0a7a6b2b3a3285c96dc189379
SHA512

ff11555783b049347b8a1700f6d62e1b8c0ffd0d3e4373c365ea756ec3402c74229216ca6819f5b83590336291e3ac72f3f435bb875547cb58b4fd254d020503
SSDEEP

12288:rnEpV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:AWVWleKWNUir2MhNl6zX3w9As/xO23Wn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  576170d3f00a7682a798de79ac71592e5f5d43e0a7a6b2b3a3285c96dc189379
- Size
  
  664KB
- MD5
  
  574c0020210a4baac954996842fc3520
- SHA1
  
  0991127381afaa2c6fc4d9fb3e6a0a378248f8b5
- SHA256
  
  576170d3f00a7682a798de79ac71592e5f5d43e0a7a6b2b3a3285c96dc189379
- SHA512
  
  ff11555783b049347b8a1700f6d62e1b8c0ffd0d3e4373c365ea756ec3402c74229216ca6819f5b83590336291e3ac72f3f435bb875547cb58b4fd254d020503
- SSDEEP
  
  12288:rnEpV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:AWVWleKWNUir2MhNl6zX3w9As/xO23Wn
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence