19946b1fa84ae1dd78bccd23bea9a31b3c83006dce40e03e2680f0a2f1998e79 | Triage

Sharing

General

Target

19946b1fa84ae1dd78bccd23bea9a31b3c83006dce40e03e2680f0a2f1998e79
Size

55KB
Sample

240829-ybpy5azbmj
MD5

416ae0ef7d172ecfb2a41e0f7c722b9f
SHA1

318b441c973edebfe47167052c1ae8b2bd33e53a
SHA256

19946b1fa84ae1dd78bccd23bea9a31b3c83006dce40e03e2680f0a2f1998e79
SHA512

2cd30505bd1ce7ac5cce4ef427cfed9b55a1310895d75f38c2089f2f242b3d2d2ae9a926d5480f16989b716bebab066e96897dae55927bca639018d1f00b4f14
SSDEEP

1536:qfKtwYrYK76bOeauqh/0OjB5xQNSoNSd0A3shxD6:QKtBUN5KVHxQNXNW0A8hh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  19946b1fa84ae1dd78bccd23bea9a31b3c83006dce40e03e2680f0a2f1998e79
- Size
  
  55KB
- MD5
  
  416ae0ef7d172ecfb2a41e0f7c722b9f
- SHA1
  
  318b441c973edebfe47167052c1ae8b2bd33e53a
- SHA256
  
  19946b1fa84ae1dd78bccd23bea9a31b3c83006dce40e03e2680f0a2f1998e79
- SHA512
  
  2cd30505bd1ce7ac5cce4ef427cfed9b55a1310895d75f38c2089f2f242b3d2d2ae9a926d5480f16989b716bebab066e96897dae55927bca639018d1f00b4f14
- SSDEEP
  
  1536:qfKtwYrYK76bOeauqh/0OjB5xQNSoNSd0A3shxD6:QKtBUN5KVHxQNXNW0A8hh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence