768b666847831b25969e736a5d708988858817017e542c6f9d1056cf676741c9 | Triage

Sharing

General

Target

768b666847831b25969e736a5d708988858817017e542c6f9d1056cf676741c9
Size

96KB
Sample

240828-3gwfbatfpm
MD5

1862e9707e9a7e5144f5d03938286cd0
SHA1

a766982f45d91b5a1f192b9d19c7c00820629915
SHA256

768b666847831b25969e736a5d708988858817017e542c6f9d1056cf676741c9
SHA512

e05fe2fd84ea5d0cd6e77009c1e5eb90e4bf25078d3e5a459b3a0f112b5a0654df130a00e005198a647c2e46cae4523892c43b4b74a6cf3f67cfda41cebb2408
SSDEEP

1536:+ke9k2bL479dQswhP5f3tTd3n66rCCc5Rkt6aAjWbjtKBvU:OL47rQswPLnrGRkt6VwtCU

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  768b666847831b25969e736a5d708988858817017e542c6f9d1056cf676741c9
- Size
  
  96KB
- MD5
  
  1862e9707e9a7e5144f5d03938286cd0
- SHA1
  
  a766982f45d91b5a1f192b9d19c7c00820629915
- SHA256
  
  768b666847831b25969e736a5d708988858817017e542c6f9d1056cf676741c9
- SHA512
  
  e05fe2fd84ea5d0cd6e77009c1e5eb90e4bf25078d3e5a459b3a0f112b5a0654df130a00e005198a647c2e46cae4523892c43b4b74a6cf3f67cfda41cebb2408
- SSDEEP
  
  1536:+ke9k2bL479dQswhP5f3tTd3n66rCCc5Rkt6aAjWbjtKBvU:OL47rQswPLnrGRkt6VwtCU
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence