88a895f6eb772770819169d8b59f4258d23c865535521eaaf13b5d32884386db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88a895f6eb772770819169d8b59f4258d23c865535521eaaf13b5d32884386db
Size

320KB
Sample

240903-af42vasdqh
MD5

c2d5936a1ebc3fa92dfbc1514e7c8f6a
SHA1

5930ef9bf4b9fbcc8c5c5e013828904187bdcd62
SHA256

88a895f6eb772770819169d8b59f4258d23c865535521eaaf13b5d32884386db
SHA512

6b330f6c38e0e96899923520709bf0c65d41d06d7aa75ad257a6ff2fc4b2c8d298f919bcb78a5602baa9408d3137043dfc8f18df32abb3d69370d26bc1f10e10
SSDEEP

6144:kLXJ+Yn5W7SQoB3Yt3XbaHJUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mxv5RV:qXJZnP6t3XGCByvNv54B9f01ZmHByvNB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  88a895f6eb772770819169d8b59f4258d23c865535521eaaf13b5d32884386db
- Size
  
  320KB
- MD5
  
  c2d5936a1ebc3fa92dfbc1514e7c8f6a
- SHA1
  
  5930ef9bf4b9fbcc8c5c5e013828904187bdcd62
- SHA256
  
  88a895f6eb772770819169d8b59f4258d23c865535521eaaf13b5d32884386db
- SHA512
  
  6b330f6c38e0e96899923520709bf0c65d41d06d7aa75ad257a6ff2fc4b2c8d298f919bcb78a5602baa9408d3137043dfc8f18df32abb3d69370d26bc1f10e10
- SSDEEP
  
  6144:kLXJ+Yn5W7SQoB3Yt3XbaHJUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mxv5RV:qXJZnP6t3XGCByvNv54B9f01ZmHByvNB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence