22f4228962fa6a1b517197dbadc2b20fdbe68ac164e38c6fa8599a47cb28a11d | Triage

Sharing

General

Target

22f4228962fa6a1b517197dbadc2b20fdbe68ac164e38c6fa8599a47cb28a11d
Size

465KB
Sample

240825-ylgqhatblj
MD5

44cea2aa7cf979f07ccfd72710ec60d2
SHA1

62a0b9befcdc8b25cab336e2f84ffabf5b2beab9
SHA256

22f4228962fa6a1b517197dbadc2b20fdbe68ac164e38c6fa8599a47cb28a11d
SHA512

689255477268634d6df666f042b93a2c2920224ecdf2034e6a2aa3429c2f679b72318bdf141a768b6b3e3226ab0adacb97c6199e771cbfd389296f03ece21d2b
SSDEEP

6144:mi2FSTp+STYaT15fq1+EKOCLxuC7Vg6h7VIjUo:miRTZTYapU8N5VTVVIj

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  22f4228962fa6a1b517197dbadc2b20fdbe68ac164e38c6fa8599a47cb28a11d
- Size
  
  465KB
- MD5
  
  44cea2aa7cf979f07ccfd72710ec60d2
- SHA1
  
  62a0b9befcdc8b25cab336e2f84ffabf5b2beab9
- SHA256
  
  22f4228962fa6a1b517197dbadc2b20fdbe68ac164e38c6fa8599a47cb28a11d
- SHA512
  
  689255477268634d6df666f042b93a2c2920224ecdf2034e6a2aa3429c2f679b72318bdf141a768b6b3e3226ab0adacb97c6199e771cbfd389296f03ece21d2b
- SSDEEP
  
  6144:mi2FSTp+STYaT15fq1+EKOCLxuC7Vg6h7VIjUo:miRTZTYapU8N5VTVVIj
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence