437f64a5f0130273bbf72301e20b29ae2fc645f08e62860935d6860cd3fa1976 | Triage

Sharing

General

Target

437f64a5f0130273bbf72301e20b29ae2fc645f08e62860935d6860cd3fa1976
Size

9.7MB
Sample

240828-1cqm6axbpf
MD5

72eb240ffd1678f6b6eb7ec26c81e980
SHA1

a927117831ee2132025616e68ad182cd744d4b39
SHA256

437f64a5f0130273bbf72301e20b29ae2fc645f08e62860935d6860cd3fa1976
SHA512

e399f82f9d3f7bfe5663da0df23e140608c5283d98af6a10e3b72205083dbeb155d4e9f44e218603b99f6e55e5f6600eb16f037c4108414dc26805041f102d31
SSDEEP

196608:rbqnhgJuP3LAhCiVXOWvd6A1oMuWr45hrr2u:wS+LJYeJWGhrr2u

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  437f64a5f0130273bbf72301e20b29ae2fc645f08e62860935d6860cd3fa1976
- Size
  
  9.7MB
- MD5
  
  72eb240ffd1678f6b6eb7ec26c81e980
- SHA1
  
  a927117831ee2132025616e68ad182cd744d4b39
- SHA256
  
  437f64a5f0130273bbf72301e20b29ae2fc645f08e62860935d6860cd3fa1976
- SHA512
  
  e399f82f9d3f7bfe5663da0df23e140608c5283d98af6a10e3b72205083dbeb155d4e9f44e218603b99f6e55e5f6600eb16f037c4108414dc26805041f102d31
- SSDEEP
  
  196608:rbqnhgJuP3LAhCiVXOWvd6A1oMuWr45hrr2u:wS+LJYeJWGhrr2u
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence