19bf50135554cfb9d08cc1b01ae4ada9e3f0cab5a4311d1811b21a3c40b99e55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19bf50135554cfb9d08cc1b01ae4ada9e3f0cab5a4311d1811b21a3c40b99e55
Size

64KB
Sample

240823-xc8l7azeqf
MD5

bbd995c8dd7ee7229097cbc701d30477
SHA1

0989c6ceb7aedf8e5964e3c59b0e3d738a96b2c0
SHA256

19bf50135554cfb9d08cc1b01ae4ada9e3f0cab5a4311d1811b21a3c40b99e55
SHA512

d965134428c4674f1c5ec411c8db5f5bec3d52e8ce2f659bb99ff435a598a451445fcbd6351080e9fa59e05f2755725aa5c8444ab40af5deb29bc1cb5add8b46
SSDEEP

1536:2Ueby13euzYA71PpG4MgAOVtF9Jg/aBVpn4VvYxm2rOmXV1iL+iALMH6:/eby13e0b71PKQiYVB4VvYxg2V1iL+9x

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  19bf50135554cfb9d08cc1b01ae4ada9e3f0cab5a4311d1811b21a3c40b99e55
- Size
  
  64KB
- MD5
  
  bbd995c8dd7ee7229097cbc701d30477
- SHA1
  
  0989c6ceb7aedf8e5964e3c59b0e3d738a96b2c0
- SHA256
  
  19bf50135554cfb9d08cc1b01ae4ada9e3f0cab5a4311d1811b21a3c40b99e55
- SHA512
  
  d965134428c4674f1c5ec411c8db5f5bec3d52e8ce2f659bb99ff435a598a451445fcbd6351080e9fa59e05f2755725aa5c8444ab40af5deb29bc1cb5add8b46
- SSDEEP
  
  1536:2Ueby13euzYA71PpG4MgAOVtF9Jg/aBVpn4VvYxm2rOmXV1iL+iALMH6:/eby13e0b71PKQiYVB4VvYxg2V1iL+9x
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence