976c98f5edc60292927558c7f31b291919960bec3f8822ae491273a2a865ed75 | Triage

Sharing

General

Target

976c98f5edc60292927558c7f31b291919960bec3f8822ae491273a2a865ed75
Size

128KB
Sample

240829-a8wk6svgna
MD5

0c3d0f3712fd23b09fdcba98d58feb55
SHA1

8de4cc662a8770ef2a3aba9179004a6e93b34a36
SHA256

976c98f5edc60292927558c7f31b291919960bec3f8822ae491273a2a865ed75
SHA512

165ac33eb5644acaff41426b1ee062a013a0b698b0d598e4cedf858bd648b52c9d3e60948cf1361afbf34b641b33b4489c628198240929e106b76471c543bd78
SSDEEP

3072:wbVBa2TXpXUcKEbMEfcdZY2ebUEdmjRrz3TIUV4BKi:MaANtbMEfcXYNIEdGTBI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  976c98f5edc60292927558c7f31b291919960bec3f8822ae491273a2a865ed75
- Size
  
  128KB
- MD5
  
  0c3d0f3712fd23b09fdcba98d58feb55
- SHA1
  
  8de4cc662a8770ef2a3aba9179004a6e93b34a36
- SHA256
  
  976c98f5edc60292927558c7f31b291919960bec3f8822ae491273a2a865ed75
- SHA512
  
  165ac33eb5644acaff41426b1ee062a013a0b698b0d598e4cedf858bd648b52c9d3e60948cf1361afbf34b641b33b4489c628198240929e106b76471c543bd78
- SSDEEP
  
  3072:wbVBa2TXpXUcKEbMEfcdZY2ebUEdmjRrz3TIUV4BKi:MaANtbMEfcXYNIEdGTBI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence