56481dbd9eb80b6b1a90f72ba06407097719e3309874e7ca1df7fbae768593f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56481dbd9eb80b6b1a90f72ba06407097719e3309874e7ca1df7fbae768593f3
Size

72KB
Sample

240903-11y97syclq
MD5

892a834995df243d1ade3a30f10e77c6
SHA1

2f61e5f1b6a92897d3839ff63d869070103fdf82
SHA256

56481dbd9eb80b6b1a90f72ba06407097719e3309874e7ca1df7fbae768593f3
SHA512

3e6a8aaade8e9aa1041befa94048da9e16b5cc914df3004a677ac4dce163b55e5056ce00b4fd4406ad5b5591494f5b0f06f62495f0450a3f3600879d3a279515
SSDEEP

1536:9qFl1hhC4uvOxWiPCwH/HcoWtqCttNod28+8w/Z8utYL2//:9ol1zxWiPCwH/8oWtqCtt2dr+8IZKqn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  56481dbd9eb80b6b1a90f72ba06407097719e3309874e7ca1df7fbae768593f3
- Size
  
  72KB
- MD5
  
  892a834995df243d1ade3a30f10e77c6
- SHA1
  
  2f61e5f1b6a92897d3839ff63d869070103fdf82
- SHA256
  
  56481dbd9eb80b6b1a90f72ba06407097719e3309874e7ca1df7fbae768593f3
- SHA512
  
  3e6a8aaade8e9aa1041befa94048da9e16b5cc914df3004a677ac4dce163b55e5056ce00b4fd4406ad5b5591494f5b0f06f62495f0450a3f3600879d3a279515
- SSDEEP
  
  1536:9qFl1hhC4uvOxWiPCwH/HcoWtqCttNod28+8w/Z8utYL2//:9ol1zxWiPCwH/8oWtqCtt2dr+8IZKqn
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence