c30e922854a3e783faa661531e28040cc23eaa2c8ce0e949786e1a5dff62d109 | Triage

Sharing

General

Target

c30e922854a3e783faa661531e28040cc23eaa2c8ce0e949786e1a5dff62d109
Size

664KB
Sample

240903-dy6vyaxcmh
MD5

ba58ead6c67f90451fba451baf2bc042
SHA1

3d2fd8ae30ccd8fa6a9f1dfcb5ffc3ae142656ae
SHA256

c30e922854a3e783faa661531e28040cc23eaa2c8ce0e949786e1a5dff62d109
SHA512

b8a3cc4d4acbd5562ca37249a77ed3e17a0a1a6824e70f48d21d313075307ca664a8bf73459289c9700f26f1af8678aa41441a939bbfe9eb0995beb9a683aa07
SSDEEP

12288:hoj6X11PpV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjF:hhPPWVWleKWNUir2MhNl6zX3w9As/xOX

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c30e922854a3e783faa661531e28040cc23eaa2c8ce0e949786e1a5dff62d109
- Size
  
  664KB
- MD5
  
  ba58ead6c67f90451fba451baf2bc042
- SHA1
  
  3d2fd8ae30ccd8fa6a9f1dfcb5ffc3ae142656ae
- SHA256
  
  c30e922854a3e783faa661531e28040cc23eaa2c8ce0e949786e1a5dff62d109
- SHA512
  
  b8a3cc4d4acbd5562ca37249a77ed3e17a0a1a6824e70f48d21d313075307ca664a8bf73459289c9700f26f1af8678aa41441a939bbfe9eb0995beb9a683aa07
- SSDEEP
  
  12288:hoj6X11PpV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjF:hhPPWVWleKWNUir2MhNl6zX3w9As/xOX
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence