b84f20370df8f9d2821133091c4e077ccb03983669bbadb46e4c802fcc0585e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b84f20370df8f9d2821133091c4e077ccb03983669bbadb46e4c802fcc0585e6
Size

89KB
Sample

240902-dh3hkszdpn
MD5

a0d6fd5fb930f04a338537e31ee8f508
SHA1

6de613914b67292757aff401b685fe2bf20d7049
SHA256

b84f20370df8f9d2821133091c4e077ccb03983669bbadb46e4c802fcc0585e6
SHA512

7ab83965204484d83c3eaa7f7b51b9c50a37835fdaaf0befbbea2af5fe51a6c53388291ef964de29c82254b1aa4ce684cd8794be7c88505b03a62dbd40d8fb1e
SSDEEP

1536:IasmcRzzn87JcLC/T6M5sV9fcVPPOQkmV5AkhZTYYs4cIlExkg8F:IhN8V6AuM5sVBcVPmQkmTAaYwcIlakgw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b84f20370df8f9d2821133091c4e077ccb03983669bbadb46e4c802fcc0585e6
- Size
  
  89KB
- MD5
  
  a0d6fd5fb930f04a338537e31ee8f508
- SHA1
  
  6de613914b67292757aff401b685fe2bf20d7049
- SHA256
  
  b84f20370df8f9d2821133091c4e077ccb03983669bbadb46e4c802fcc0585e6
- SHA512
  
  7ab83965204484d83c3eaa7f7b51b9c50a37835fdaaf0befbbea2af5fe51a6c53388291ef964de29c82254b1aa4ce684cd8794be7c88505b03a62dbd40d8fb1e
- SSDEEP
  
  1536:IasmcRzzn87JcLC/T6M5sV9fcVPPOQkmV5AkhZTYYs4cIlExkg8F:IhN8V6AuM5sVBcVPmQkmTAaYwcIlakgw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence