d0e62a2209661d50b99dc308a84320b4d833521c266a3a5be47e9fb38363ba62 | Triage

Sharing

General

Target

d0e62a2209661d50b99dc308a84320b4d833521c266a3a5be47e9fb38363ba62
Size

87KB
Sample

240901-dnjbwszejk
MD5

efa36903bf239b011dec221b39a281f1
SHA1

3516c8a667c614ddee8c62a642bca3125e041159
SHA256

d0e62a2209661d50b99dc308a84320b4d833521c266a3a5be47e9fb38363ba62
SHA512

80bfa975492d9965e301e34421e57c0207a0dfbe5f3ba658fd41416a63d09f6f91a7c6687e63a98e5555888bd049853a37e105a1fcba78da5ba56d1be103253d
SSDEEP

1536:gJYit8Fs0sEHlx9EYLf3QLUDYiLqty2fDc0ERQ47RSRBDNrR0RVe7R6R8RPD2zx:h7T9Hlr1fALE7qtyoKe+AnDlmbGcGFDA

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d0e62a2209661d50b99dc308a84320b4d833521c266a3a5be47e9fb38363ba62
- Size
  
  87KB
- MD5
  
  efa36903bf239b011dec221b39a281f1
- SHA1
  
  3516c8a667c614ddee8c62a642bca3125e041159
- SHA256
  
  d0e62a2209661d50b99dc308a84320b4d833521c266a3a5be47e9fb38363ba62
- SHA512
  
  80bfa975492d9965e301e34421e57c0207a0dfbe5f3ba658fd41416a63d09f6f91a7c6687e63a98e5555888bd049853a37e105a1fcba78da5ba56d1be103253d
- SSDEEP
  
  1536:gJYit8Fs0sEHlx9EYLf3QLUDYiLqty2fDc0ERQ47RSRBDNrR0RVe7R6R8RPD2zx:h7T9Hlr1fALE7qtyoKe+AnDlmbGcGFDA
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence