4415d4f6b3a344e159cc48eb7fe43754211ce965098639b9760224fb54a18aa4 | Triage

Sharing

General

Target

4415d4f6b3a344e159cc48eb7fe43754211ce965098639b9760224fb54a18aa4
Size

123KB
Sample

240824-1sfsws1hjc
MD5

5f11c06b08ae357e1e862c2c846a6c13
SHA1

30fb96942d1148a7b5b87f3516618afc5ccd2c3c
SHA256

4415d4f6b3a344e159cc48eb7fe43754211ce965098639b9760224fb54a18aa4
SHA512

6e740ef19ec904f7a9ec9fce6f40d2b8d1f8ac78990988da4f70eb849ffb675dc7955b2f7acf99aef88a799dc558a7ea14ae988540fd714a9a7b7bdb0e9bff95
SSDEEP

3072:4IcEbpIoWgk265rsPHzMgCtEzRYSa9rR85DEn5k7r8:41Ebth69sPznz4rQD85k/8

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  4415d4f6b3a344e159cc48eb7fe43754211ce965098639b9760224fb54a18aa4
- Size
  
  123KB
- MD5
  
  5f11c06b08ae357e1e862c2c846a6c13
- SHA1
  
  30fb96942d1148a7b5b87f3516618afc5ccd2c3c
- SHA256
  
  4415d4f6b3a344e159cc48eb7fe43754211ce965098639b9760224fb54a18aa4
- SHA512
  
  6e740ef19ec904f7a9ec9fce6f40d2b8d1f8ac78990988da4f70eb849ffb675dc7955b2f7acf99aef88a799dc558a7ea14ae988540fd714a9a7b7bdb0e9bff95
- SSDEEP
  
  3072:4IcEbpIoWgk265rsPHzMgCtEzRYSa9rR85DEn5k7r8:41Ebth69sPznz4rQD85k/8
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence