d4bacc89b9613ea75bdc3b27e81baa8ce010c6fd08264213ef188157f974cd3a | Triage

Sharing

General

Target

d4bacc89b9613ea75bdc3b27e81baa8ce010c6fd08264213ef188157f974cd3a
Size

416KB
Sample

240902-ezheeasenc
MD5

c57c3bb067a4fdd9c2b6026e5a8a30b7
SHA1

e242e9ac69213d3c07d48f629cc0f3ff6134e22f
SHA256

d4bacc89b9613ea75bdc3b27e81baa8ce010c6fd08264213ef188157f974cd3a
SHA512

d468323a5c4d217676fa709d2663dd60b8b9b690de3c76dbbd91d9dbc60d1ec962b446657118bfea1e8a44cfacc0071df9a11c289b1e48cd15d9c18b63edc930
SSDEEP

3072:fH3LMq9r9VAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:QU9Rs+HLlD0rN2ZwVht740PP

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d4bacc89b9613ea75bdc3b27e81baa8ce010c6fd08264213ef188157f974cd3a
- Size
  
  416KB
- MD5
  
  c57c3bb067a4fdd9c2b6026e5a8a30b7
- SHA1
  
  e242e9ac69213d3c07d48f629cc0f3ff6134e22f
- SHA256
  
  d4bacc89b9613ea75bdc3b27e81baa8ce010c6fd08264213ef188157f974cd3a
- SHA512
  
  d468323a5c4d217676fa709d2663dd60b8b9b690de3c76dbbd91d9dbc60d1ec962b446657118bfea1e8a44cfacc0071df9a11c289b1e48cd15d9c18b63edc930
- SSDEEP
  
  3072:fH3LMq9r9VAURfE+HAokWmvEie0RFz3yE2ZwVh16Mz7GFD0AlWP:QU9Rs+HLlD0rN2ZwVht740PP
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence