fb901b8556826bf89cd7c6ece8927b1aa6a864428b40336e5a7dbe10d88f650a | Triage

Sharing

General

Target

fb901b8556826bf89cd7c6ece8927b1aa6a864428b40336e5a7dbe10d88f650a
Size

56KB
Sample

240829-gdl7ksyaqm
MD5

2422b96b86c2fdb1248ebce99181af33
SHA1

1a86f12bf07c8a8e7924eb853d48fc6d4776d476
SHA256

fb901b8556826bf89cd7c6ece8927b1aa6a864428b40336e5a7dbe10d88f650a
SHA512

535e3bc6d177de7e2645d629b44c96f2a719780919a617735a607a7e9e86e0a4d6d21fc1aef579764f547418d21eaf6e564f1df3c14ffd766ba1a7c9e0f2e315
SSDEEP

768:lebg9wjODOwz1iAK5CcWfJKXRjt77VP9HIwa1zvgH47Z6EQst/C0JXcN/1H5bXdh:l0g9pJpiXnl5MwKoH4kqBJsHP

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fb901b8556826bf89cd7c6ece8927b1aa6a864428b40336e5a7dbe10d88f650a
- Size
  
  56KB
- MD5
  
  2422b96b86c2fdb1248ebce99181af33
- SHA1
  
  1a86f12bf07c8a8e7924eb853d48fc6d4776d476
- SHA256
  
  fb901b8556826bf89cd7c6ece8927b1aa6a864428b40336e5a7dbe10d88f650a
- SHA512
  
  535e3bc6d177de7e2645d629b44c96f2a719780919a617735a607a7e9e86e0a4d6d21fc1aef579764f547418d21eaf6e564f1df3c14ffd766ba1a7c9e0f2e315
- SSDEEP
  
  768:lebg9wjODOwz1iAK5CcWfJKXRjt77VP9HIwa1zvgH47Z6EQst/C0JXcN/1H5bXdh:l0g9pJpiXnl5MwKoH4kqBJsHP
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence