eaf7091eb85282ddd4ad914837c170a04061d89f3b7df66bcdccf2896d9de44f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf7091eb85282ddd4ad914837c170a04061d89f3b7df66bcdccf2896d9de44f
Size

55KB
Sample

240824-ge6mlsxfjr
MD5

b0decae31058f2565bd7891f830e9064
SHA1

245ce073b4696c0018359eda2d8eb5bdad1596c2
SHA256

eaf7091eb85282ddd4ad914837c170a04061d89f3b7df66bcdccf2896d9de44f
SHA512

2ba1d5a944c79a02a45fbeab62d66db32d4210678ce921938963a06115f9e0989b4c3be615650cc6048e9dc89432e022d43dbeefe75fbcd4a7c0f331855d92e0
SSDEEP

1536:Cu9XNBG7gqnTTJsaQ/F36HoCSNNSoNSd0A3shxD6:z9XSXnWa7SNNXNW0A8hh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  eaf7091eb85282ddd4ad914837c170a04061d89f3b7df66bcdccf2896d9de44f
- Size
  
  55KB
- MD5
  
  b0decae31058f2565bd7891f830e9064
- SHA1
  
  245ce073b4696c0018359eda2d8eb5bdad1596c2
- SHA256
  
  eaf7091eb85282ddd4ad914837c170a04061d89f3b7df66bcdccf2896d9de44f
- SHA512
  
  2ba1d5a944c79a02a45fbeab62d66db32d4210678ce921938963a06115f9e0989b4c3be615650cc6048e9dc89432e022d43dbeefe75fbcd4a7c0f331855d92e0
- SSDEEP
  
  1536:Cu9XNBG7gqnTTJsaQ/F36HoCSNNSoNSd0A3shxD6:z9XSXnWa7SNNXNW0A8hh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence