a8eb05b9f70bb34ad0202f6868a2b74a982eb3d815d95734f79eccd82a85fe9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8eb05b9f70bb34ad0202f6868a2b74a982eb3d815d95734f79eccd82a85fe9b
Size

64KB
Sample

240824-a4xbxayclk
MD5

ae3286a9d6735470b8af2e4e607f69de
SHA1

d281f05606c140f98c59cfdb5da23266f11d7e9b
SHA256

a8eb05b9f70bb34ad0202f6868a2b74a982eb3d815d95734f79eccd82a85fe9b
SHA512

ca14c4da81177649f42acfb53a5203f68f7f901696c2cd57f0de61877fb55cff97509dded1e25b2c0b8040a80035acd3d2a988fddf1a90247887e319b2126c87
SSDEEP

768:EdOBfJypG1s3JCs5s2BB5Pci+2OvDRmyCUwuRkivnDFuunBt2T/k/hBUTA6H0g2S:EdFKujskBovcgk2prnpaA6v2LErDWBi

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a8eb05b9f70bb34ad0202f6868a2b74a982eb3d815d95734f79eccd82a85fe9b
- Size
  
  64KB
- MD5
  
  ae3286a9d6735470b8af2e4e607f69de
- SHA1
  
  d281f05606c140f98c59cfdb5da23266f11d7e9b
- SHA256
  
  a8eb05b9f70bb34ad0202f6868a2b74a982eb3d815d95734f79eccd82a85fe9b
- SHA512
  
  ca14c4da81177649f42acfb53a5203f68f7f901696c2cd57f0de61877fb55cff97509dded1e25b2c0b8040a80035acd3d2a988fddf1a90247887e319b2126c87
- SSDEEP
  
  768:EdOBfJypG1s3JCs5s2BB5Pci+2OvDRmyCUwuRkivnDFuunBt2T/k/hBUTA6H0g2S:EdFKujskBovcgk2prnpaA6v2LErDWBi
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence