a2ed9e5c6fa9699ac57de1196d6562c89a8297fb8545dffab3b926b5115cd7b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2ed9e5c6fa9699ac57de1196d6562c89a8297fb8545dffab3b926b5115cd7b1
Size

1.1MB
Sample

240901-a9k6tsvgpp
MD5

ba3549ae8cdc1fae00a3577c13f051a7
SHA1

b7332a48c4d1b9c0070c505a2aab3b016e49d387
SHA256

a2ed9e5c6fa9699ac57de1196d6562c89a8297fb8545dffab3b926b5115cd7b1
SHA512

f6cd0e15110780c7d81837bda0883dc917a3817fcb9e3a4b4085a30d06e04f4fc01849ef008823c4404280a591cc907f0073e6cdecfece226f3084631c33fb5c
SSDEEP

12288:dwKfOVRo9yRYsIHLUh7Wk/LmF4O8b8ITDnlydqY:dxWVeyRYsIH8BTg4O8b8ITDnlykY

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  a2ed9e5c6fa9699ac57de1196d6562c89a8297fb8545dffab3b926b5115cd7b1
- Size
  
  1.1MB
- MD5
  
  ba3549ae8cdc1fae00a3577c13f051a7
- SHA1
  
  b7332a48c4d1b9c0070c505a2aab3b016e49d387
- SHA256
  
  a2ed9e5c6fa9699ac57de1196d6562c89a8297fb8545dffab3b926b5115cd7b1
- SHA512
  
  f6cd0e15110780c7d81837bda0883dc917a3817fcb9e3a4b4085a30d06e04f4fc01849ef008823c4404280a591cc907f0073e6cdecfece226f3084631c33fb5c
- SSDEEP
  
  12288:dwKfOVRo9yRYsIHLUh7Wk/LmF4O8b8ITDnlydqY:dxWVeyRYsIH8BTg4O8b8ITDnlykY
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence