10837c601666d63a00cabaf4dd8544bbfb1bdd64b39939c98e5cb147603cde46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10837c601666d63a00cabaf4dd8544bbfb1bdd64b39939c98e5cb147603cde46
Size

95KB
Sample

240829-xqzanswfla
MD5

808499d6f3633186fafbcd8bd43cd01c
SHA1

2a81454a1e0575813f35bbe4138a078c0e7f3983
SHA256

10837c601666d63a00cabaf4dd8544bbfb1bdd64b39939c98e5cb147603cde46
SHA512

ba7b9f6434a377d10cc453d3c163c7392e06676e6d4f755c7041da76385d1495a5886dc3454d2dcb50d3644d72835762e84fc8a8e57c2eb5cd72423d13d4e863
SSDEEP

1536:uIZh4apU3hDzFEgcsMi12vwISSHk1BkXLbx/0rwiAM9VTP9G7wYTCTv1j49URyLN:LpUpFEgivxSSHkbkXvx/0Tp1YTCTvZ4T

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  10837c601666d63a00cabaf4dd8544bbfb1bdd64b39939c98e5cb147603cde46
- Size
  
  95KB
- MD5
  
  808499d6f3633186fafbcd8bd43cd01c
- SHA1
  
  2a81454a1e0575813f35bbe4138a078c0e7f3983
- SHA256
  
  10837c601666d63a00cabaf4dd8544bbfb1bdd64b39939c98e5cb147603cde46
- SHA512
  
  ba7b9f6434a377d10cc453d3c163c7392e06676e6d4f755c7041da76385d1495a5886dc3454d2dcb50d3644d72835762e84fc8a8e57c2eb5cd72423d13d4e863
- SSDEEP
  
  1536:uIZh4apU3hDzFEgcsMi12vwISSHk1BkXLbx/0rwiAM9VTP9G7wYTCTv1j49URyLN:LpUpFEgivxSSHkbkXvx/0Tp1YTCTvZ4T
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence