8e367f1f5654b08c557ab8f826e61b172af5f2043636b27402253a69b8a11a7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e367f1f5654b08c557ab8f826e61b172af5f2043636b27402253a69b8a11a7c
Size

93KB
Sample

240825-b1v54sshkl
MD5

5cac4926cd55332dbc24cfaee8f39416
SHA1

2d5d258a2dbc68bac29d28916e586aa5a6b94a89
SHA256

8e367f1f5654b08c557ab8f826e61b172af5f2043636b27402253a69b8a11a7c
SHA512

716b5cee2864e7fdbd88a7817a0607614b3e46054821937c9e354c68ed5f80b458367d2ab2fa64ca7cd2941aac9a56821e842e8d79401d7c8660eb7059a57388
SSDEEP

1536:wPLG/Gpx17TKwmLUv6svabdp0YkGJ2osRQ2RkRLJzeLD9N0iQGRNQR8RyV+32rR:wjG/Gpx17TKwoKSBaTGY3e2SJdEN0s4X

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8e367f1f5654b08c557ab8f826e61b172af5f2043636b27402253a69b8a11a7c
- Size
  
  93KB
- MD5
  
  5cac4926cd55332dbc24cfaee8f39416
- SHA1
  
  2d5d258a2dbc68bac29d28916e586aa5a6b94a89
- SHA256
  
  8e367f1f5654b08c557ab8f826e61b172af5f2043636b27402253a69b8a11a7c
- SHA512
  
  716b5cee2864e7fdbd88a7817a0607614b3e46054821937c9e354c68ed5f80b458367d2ab2fa64ca7cd2941aac9a56821e842e8d79401d7c8660eb7059a57388
- SSDEEP
  
  1536:wPLG/Gpx17TKwmLUv6svabdp0YkGJ2osRQ2RkRLJzeLD9N0iQGRNQR8RyV+32rR:wjG/Gpx17TKwoKSBaTGY3e2SJdEN0s4X
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence