bf546850590a79f6035d2ebd093bdda0dfcebbe72abcb11065e5730db6cbb51d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf546850590a79f6035d2ebd093bdda0dfcebbe72abcb11065e5730db6cbb51d
Size

89KB
Sample

240819-bhklnayfjk
MD5

a4d38309092150a781c1a9a4b951a26a
SHA1

ca25aca635bd4c4aaad7e2360a969191967478a5
SHA256

bf546850590a79f6035d2ebd093bdda0dfcebbe72abcb11065e5730db6cbb51d
SHA512

7ad948c699cc265040857c6648298b5663a9efd75a277b4742fbb1dd73dc6e6b275e1ca7293451b55d4dfeb061a65ef8337a8692c5bdc37d6e978a8edb5f17ed
SSDEEP

1536:642G6qNgwNDFO4ehCNDIb3aW5HdG3CUeQl96sc5lExkg8F:R2G6+NDuhCckD96sc5lakgw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bf546850590a79f6035d2ebd093bdda0dfcebbe72abcb11065e5730db6cbb51d
- Size
  
  89KB
- MD5
  
  a4d38309092150a781c1a9a4b951a26a
- SHA1
  
  ca25aca635bd4c4aaad7e2360a969191967478a5
- SHA256
  
  bf546850590a79f6035d2ebd093bdda0dfcebbe72abcb11065e5730db6cbb51d
- SHA512
  
  7ad948c699cc265040857c6648298b5663a9efd75a277b4742fbb1dd73dc6e6b275e1ca7293451b55d4dfeb061a65ef8337a8692c5bdc37d6e978a8edb5f17ed
- SSDEEP
  
  1536:642G6qNgwNDFO4ehCNDIb3aW5HdG3CUeQl96sc5lExkg8F:R2G6+NDuhCckD96sc5lakgw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence