700a1274a369c45623f3a6dd1959dbd85b69eb9e8e908c9f39651a9caf2be127 | Triage

Sharing

General

Target

700a1274a369c45623f3a6dd1959dbd85b69eb9e8e908c9f39651a9caf2be127
Size

768KB
Sample

240903-259geazdlk
MD5

785c87fefa73edfecee2d9f123b0de6c
SHA1

ab892244403f9ff39150d17d9a9ae459b005fa36
SHA256

700a1274a369c45623f3a6dd1959dbd85b69eb9e8e908c9f39651a9caf2be127
SHA512

803f54e691990339ce59a34f2b64f8743f907f7de1b4ec936dc49234fe4e71074feb6b495648fd341e2560a3af76bcc90d403141a4afa9efd80a5d5494e8144a
SSDEEP

6144:GNFQtinBiTEyZxDHBFLqWjjgwTgZLnSnLrTSxJ2JrYXklSu9lIhBBJKQh31GTa:Rtir4tHBFLPj3TmLnWrOxNuxC97hFqa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  700a1274a369c45623f3a6dd1959dbd85b69eb9e8e908c9f39651a9caf2be127
- Size
  
  768KB
- MD5
  
  785c87fefa73edfecee2d9f123b0de6c
- SHA1
  
  ab892244403f9ff39150d17d9a9ae459b005fa36
- SHA256
  
  700a1274a369c45623f3a6dd1959dbd85b69eb9e8e908c9f39651a9caf2be127
- SHA512
  
  803f54e691990339ce59a34f2b64f8743f907f7de1b4ec936dc49234fe4e71074feb6b495648fd341e2560a3af76bcc90d403141a4afa9efd80a5d5494e8144a
- SSDEEP
  
  6144:GNFQtinBiTEyZxDHBFLqWjjgwTgZLnSnLrTSxJ2JrYXklSu9lIhBBJKQh31GTa:Rtir4tHBFLPj3TmLnWrOxNuxC97hFqa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence