e0bba88d6351d1d67f53693357cd87c5e6c4e59985009aacf002c0869cdcc021 | Triage

Sharing

General

Target

e0bba88d6351d1d67f53693357cd87c5e6c4e59985009aacf002c0869cdcc021
Size

380KB
Sample

240901-engcza1cpr
MD5

1cf189d57d9121d7db5fe3bd49582b53
SHA1

e4ad23d97525fb675c9f2b7f502e810a59c1c8f0
SHA256

e0bba88d6351d1d67f53693357cd87c5e6c4e59985009aacf002c0869cdcc021
SHA512

b50197400baf0b062275458cc4823349075d366c45784accbf62f9f1ee9715e3be4b0bfef983bbf7af57b90452b75fa7c2a8115c1bf58896b15701a0a1a4c709
SSDEEP

6144:4r8MbccmCXNmCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:4r8cmCROtoq5t6NSN6G5tbt5t6NSN6T

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e0bba88d6351d1d67f53693357cd87c5e6c4e59985009aacf002c0869cdcc021
- Size
  
  380KB
- MD5
  
  1cf189d57d9121d7db5fe3bd49582b53
- SHA1
  
  e4ad23d97525fb675c9f2b7f502e810a59c1c8f0
- SHA256
  
  e0bba88d6351d1d67f53693357cd87c5e6c4e59985009aacf002c0869cdcc021
- SHA512
  
  b50197400baf0b062275458cc4823349075d366c45784accbf62f9f1ee9715e3be4b0bfef983bbf7af57b90452b75fa7c2a8115c1bf58896b15701a0a1a4c709
- SSDEEP
  
  6144:4r8MbccmCXNmCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:4r8cmCROtoq5t6NSN6G5tbt5t6NSN6T
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence