15c13ddec15647dac87808d10f3ec49e1bcf4f6c4cf281486f04de9076001a48 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15c13ddec15647dac87808d10f3ec49e1bcf4f6c4cf281486f04de9076001a48
Size

280KB
Sample

240823-w82yvasarj
MD5

835d54f72e90b85b17544a73a69beac6
SHA1

2c98b645340c285c65bbfeb6fd3b3d9dd09ee532
SHA256

15c13ddec15647dac87808d10f3ec49e1bcf4f6c4cf281486f04de9076001a48
SHA512

f9d398841e3e5ed996d186456337a464e9349c07b036fd04ff5ea8a42f4082fc8a88e98b86df5f02fadcd770dd1ccf9b74e90a1c2cfc718241438b428a84567d
SSDEEP

1536:TUzGAbkgBH+z3JwIfekwf0WIcyohseMUKPeoxZslAGhZxPBljjGs8f7hG6q+jiWB:PakgBHapyf04hZK7xVG9Btj676ZBI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  15c13ddec15647dac87808d10f3ec49e1bcf4f6c4cf281486f04de9076001a48
- Size
  
  280KB
- MD5
  
  835d54f72e90b85b17544a73a69beac6
- SHA1
  
  2c98b645340c285c65bbfeb6fd3b3d9dd09ee532
- SHA256
  
  15c13ddec15647dac87808d10f3ec49e1bcf4f6c4cf281486f04de9076001a48
- SHA512
  
  f9d398841e3e5ed996d186456337a464e9349c07b036fd04ff5ea8a42f4082fc8a88e98b86df5f02fadcd770dd1ccf9b74e90a1c2cfc718241438b428a84567d
- SSDEEP
  
  1536:TUzGAbkgBH+z3JwIfekwf0WIcyohseMUKPeoxZslAGhZxPBljjGs8f7hG6q+jiWB:PakgBHapyf04hZK7xVG9Btj676ZBI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence