2a24ddc2cfc8261dd49a9b6db57f1c9152d17ebfda3bc18b64d3e513e416d318 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a24ddc2cfc8261dd49a9b6db57f1c9152d17ebfda3bc18b64d3e513e416d318
Size

427KB
Sample

240901-zdmgfs1brq
MD5

ab3297deecdf76e70f1eec229ae0ed4a
SHA1

818ab85b8aba8a3165abc7215271fa375a27a622
SHA256

2a24ddc2cfc8261dd49a9b6db57f1c9152d17ebfda3bc18b64d3e513e416d318
SHA512

dfc6872975186690c322271abe344c060af5ec55a3af0732eaad610ccb00fbf09bf2991f8f2a34227be4a5cf5af3a87a952e2a616809c6c3d189daba1f847718
SSDEEP

3072:4Zp1c9qSLtHOF1PSshRi9TeleLRYSa9rR85DEn5k7rC:qmHOTlhRi9bL4rQD85k/

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2a24ddc2cfc8261dd49a9b6db57f1c9152d17ebfda3bc18b64d3e513e416d318
- Size
  
  427KB
- MD5
  
  ab3297deecdf76e70f1eec229ae0ed4a
- SHA1
  
  818ab85b8aba8a3165abc7215271fa375a27a622
- SHA256
  
  2a24ddc2cfc8261dd49a9b6db57f1c9152d17ebfda3bc18b64d3e513e416d318
- SHA512
  
  dfc6872975186690c322271abe344c060af5ec55a3af0732eaad610ccb00fbf09bf2991f8f2a34227be4a5cf5af3a87a952e2a616809c6c3d189daba1f847718
- SSDEEP
  
  3072:4Zp1c9qSLtHOF1PSshRi9TeleLRYSa9rR85DEn5k7rC:qmHOTlhRi9bL4rQD85k/
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence