aa357b3fd71779edfb0bdcaaa6c49d1456cb14fe23e248129fb2687b0e6a8a13 | Triage

Sharing

General

Target

aa357b3fd71779edfb0bdcaaa6c49d1456cb14fe23e248129fb2687b0e6a8a13
Size

128KB
Sample

240824-a56xqsycrm
MD5

7e1ac7dc4c53d57ee1b3ab295aec5546
SHA1

9ff8fba4437385869de5b84d04e2d6511f4b7976
SHA256

aa357b3fd71779edfb0bdcaaa6c49d1456cb14fe23e248129fb2687b0e6a8a13
SHA512

d0ab398a20ce38da585aa940fe92449f961c4c10777386ed4581101f07308200ff0a34fd573ae06c21e6a48551ddda76ed864bf57bba2d5d33247fbcc5b209c4
SSDEEP

3072:ExdNoL0zsgn3euKgVGAAAAAAAAAAAAAA4jrKneA87DxSvITW/cbFGS9n:Yvo4zsk317VpHAAhCw9n

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  aa357b3fd71779edfb0bdcaaa6c49d1456cb14fe23e248129fb2687b0e6a8a13
- Size
  
  128KB
- MD5
  
  7e1ac7dc4c53d57ee1b3ab295aec5546
- SHA1
  
  9ff8fba4437385869de5b84d04e2d6511f4b7976
- SHA256
  
  aa357b3fd71779edfb0bdcaaa6c49d1456cb14fe23e248129fb2687b0e6a8a13
- SHA512
  
  d0ab398a20ce38da585aa940fe92449f961c4c10777386ed4581101f07308200ff0a34fd573ae06c21e6a48551ddda76ed864bf57bba2d5d33247fbcc5b209c4
- SSDEEP
  
  3072:ExdNoL0zsgn3euKgVGAAAAAAAAAAAAAA4jrKneA87DxSvITW/cbFGS9n:Yvo4zsk317VpHAAhCw9n
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence