11623963b197e124c1b8e366a9bd112f7de975f22b2e0343ab4cc21dbe444111 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11623963b197e124c1b8e366a9bd112f7de975f22b2e0343ab4cc21dbe444111
Size

427KB
Sample

240901-xf8flazbpf
MD5

b720b50436381b935f304a9b1322d70b
SHA1

47c7a3d004b03b03d39fc8b57cc220cf28e494b6
SHA256

11623963b197e124c1b8e366a9bd112f7de975f22b2e0343ab4cc21dbe444111
SHA512

1831b4cebdd6aa964192f5a599107291f240b1682748b0351447d73fcc3d6dd82f7f9612ebb8c2b075a3b153f41eb0245ade0f9897e0e9259915b704b6323128
SSDEEP

6144:4Z1BAAbchSTYaT15f7o+STYaT15fAK8yfMx/D4LJZPlVcxqy1:21BAyTYapJoTYapz8ye49vWq

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  11623963b197e124c1b8e366a9bd112f7de975f22b2e0343ab4cc21dbe444111
- Size
  
  427KB
- MD5
  
  b720b50436381b935f304a9b1322d70b
- SHA1
  
  47c7a3d004b03b03d39fc8b57cc220cf28e494b6
- SHA256
  
  11623963b197e124c1b8e366a9bd112f7de975f22b2e0343ab4cc21dbe444111
- SHA512
  
  1831b4cebdd6aa964192f5a599107291f240b1682748b0351447d73fcc3d6dd82f7f9612ebb8c2b075a3b153f41eb0245ade0f9897e0e9259915b704b6323128
- SSDEEP
  
  6144:4Z1BAAbchSTYaT15f7o+STYaT15fAK8yfMx/D4LJZPlVcxqy1:21BAyTYapJoTYapz8ye49vWq
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence