d0802a0650284bbefa9df52eeb8789c5f3ad6dce46695f1cc9c122313bfb6370 | Triage

Sharing

General

Target

d0802a0650284bbefa9df52eeb8789c5f3ad6dce46695f1cc9c122313bfb6370
Size

80KB
Sample

240903-eyks5syare
MD5

44c2d448a5465d98b18316536280fc5a
SHA1

c378b5acd79a11821278f12a35ff662c89005436
SHA256

d0802a0650284bbefa9df52eeb8789c5f3ad6dce46695f1cc9c122313bfb6370
SHA512

b99e700c6b6bc5093eea9e89b35e0cc1823433ef5d57953ae6d85d21e56888be219916c715a0429e97742d7ad6d90b3694fb5c405fae72f9a8472d335f5c238a
SSDEEP

1536:ay5gBEZHwa9q3WisF5o38PrDzaB/xOMPldJdRJzWOsFeJuqnhCN:aGDZQa9/3zaDOgDJdRJzJsFeJLCN

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d0802a0650284bbefa9df52eeb8789c5f3ad6dce46695f1cc9c122313bfb6370
- Size
  
  80KB
- MD5
  
  44c2d448a5465d98b18316536280fc5a
- SHA1
  
  c378b5acd79a11821278f12a35ff662c89005436
- SHA256
  
  d0802a0650284bbefa9df52eeb8789c5f3ad6dce46695f1cc9c122313bfb6370
- SHA512
  
  b99e700c6b6bc5093eea9e89b35e0cc1823433ef5d57953ae6d85d21e56888be219916c715a0429e97742d7ad6d90b3694fb5c405fae72f9a8472d335f5c238a
- SSDEEP
  
  1536:ay5gBEZHwa9q3WisF5o38PrDzaB/xOMPldJdRJzWOsFeJuqnhCN:aGDZQa9/3zaDOgDJdRJzJsFeJLCN
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence