6ec7959cbb1d8af913e76b9fbb54f5f71b12fdd7c82c3585db29669c21ec7e86 | Triage

Sharing

General

Target

6ec7959cbb1d8af913e76b9fbb54f5f71b12fdd7c82c3585db29669c21ec7e86
Size

93KB
Sample

240902-22fpxszcpk
MD5

dcb1ef98c7a06d1286620e0ebadefd5f
SHA1

6986fb5939e2cb9d78a259573437e1744eea0324
SHA256

6ec7959cbb1d8af913e76b9fbb54f5f71b12fdd7c82c3585db29669c21ec7e86
SHA512

64e231bbf3bb1a5b6b8bad7d29ae8660078f922ee4ec672f77f055d7dde15f0111b73d3a28de792cad0437c7c90a1672a93ad2bae0b140d29ba6c57127e47456
SSDEEP

1536:XdEqzqsRkHX7lDOIx1rsDPav3Bid75YrrA1iKsRQjRkRLJzeLD9N0iQGRNQR8Ryn:tEqzqMkHX7xx1sqcddAtejSJdEN0s4Wg

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6ec7959cbb1d8af913e76b9fbb54f5f71b12fdd7c82c3585db29669c21ec7e86
- Size
  
  93KB
- MD5
  
  dcb1ef98c7a06d1286620e0ebadefd5f
- SHA1
  
  6986fb5939e2cb9d78a259573437e1744eea0324
- SHA256
  
  6ec7959cbb1d8af913e76b9fbb54f5f71b12fdd7c82c3585db29669c21ec7e86
- SHA512
  
  64e231bbf3bb1a5b6b8bad7d29ae8660078f922ee4ec672f77f055d7dde15f0111b73d3a28de792cad0437c7c90a1672a93ad2bae0b140d29ba6c57127e47456
- SSDEEP
  
  1536:XdEqzqsRkHX7lDOIx1rsDPav3Bid75YrrA1iKsRQjRkRLJzeLD9N0iQGRNQR8Ryn:tEqzqMkHX7xx1sqcddAtejSJdEN0s4Wg
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence