a26e8844bcf3a33af01eb9ce5cf889972833a4f6b14baae9e9bb90138d12f883 | Triage

Sharing

General

Target

a26e8844bcf3a33af01eb9ce5cf889972833a4f6b14baae9e9bb90138d12f883
Size

96KB
Sample

240901-a8cs3avhqf
MD5

04ddb03af5a0f6833822addb1ff7ef9d
SHA1

ca65813e46f32334a8d53025a218cba49adf85e9
SHA256

a26e8844bcf3a33af01eb9ce5cf889972833a4f6b14baae9e9bb90138d12f883
SHA512

c3526527ff697794139c4a40b24a40764f262703b65ab4e2e78cd98660c8a396240456bf29461e2823edc3eb90a035c2402790c31b8637e0118abcd79025081f
SSDEEP

1536:Q27H9k3Xhf+avfE1ZWTF7kGpVU+jIIdXxnGkxhUMhzQQZh5duV9jojTIvjrH:QEC3xZEbApkkUUdhnxHXzQQZnd69jc0X

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a26e8844bcf3a33af01eb9ce5cf889972833a4f6b14baae9e9bb90138d12f883
- Size
  
  96KB
- MD5
  
  04ddb03af5a0f6833822addb1ff7ef9d
- SHA1
  
  ca65813e46f32334a8d53025a218cba49adf85e9
- SHA256
  
  a26e8844bcf3a33af01eb9ce5cf889972833a4f6b14baae9e9bb90138d12f883
- SHA512
  
  c3526527ff697794139c4a40b24a40764f262703b65ab4e2e78cd98660c8a396240456bf29461e2823edc3eb90a035c2402790c31b8637e0118abcd79025081f
- SSDEEP
  
  1536:Q27H9k3Xhf+avfE1ZWTF7kGpVU+jIIdXxnGkxhUMhzQQZh5duV9jojTIvjrH:QEC3xZEbApkkUUdhnxHXzQQZnd69jc0X
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence