231d1c11a5e5084e352b14cb112cbec474b6e308787b53a76fc8aa9d1c972f30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

231d1c11a5e5084e352b14cb112cbec474b6e308787b53a76fc8aa9d1c972f30
Size

194KB
Sample

240823-1jbgtazhml
MD5

1a746b505cee2920a37470165ca53ab9
SHA1

9bfc7e67b6406ce16d2aee8d1f5bd4b307cf96c1
SHA256

231d1c11a5e5084e352b14cb112cbec474b6e308787b53a76fc8aa9d1c972f30
SHA512

872cab127255ea2b7aaa039c441db183bd9b593bf0a0c14c37661a5bb9d11eb4d0d8014f5a8f277214862d1400c186c4409d1725d60494c14f32b5810f4055df
SSDEEP

3072:47dtdH4EWkfdSfUNRbCeR0pN03xWlJ7mlOD6pN03:4BtbfdSfUNRbCeKpNYxWlJ7mkD6pNY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  231d1c11a5e5084e352b14cb112cbec474b6e308787b53a76fc8aa9d1c972f30
- Size
  
  194KB
- MD5
  
  1a746b505cee2920a37470165ca53ab9
- SHA1
  
  9bfc7e67b6406ce16d2aee8d1f5bd4b307cf96c1
- SHA256
  
  231d1c11a5e5084e352b14cb112cbec474b6e308787b53a76fc8aa9d1c972f30
- SHA512
  
  872cab127255ea2b7aaa039c441db183bd9b593bf0a0c14c37661a5bb9d11eb4d0d8014f5a8f277214862d1400c186c4409d1725d60494c14f32b5810f4055df
- SSDEEP
  
  3072:47dtdH4EWkfdSfUNRbCeR0pN03xWlJ7mlOD6pN03:4BtbfdSfUNRbCeKpNYxWlJ7mkD6pNY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence