ed1c0d1850a2cc21529d449b1d5bdb4a7e1e8f73da44d13bfd3a978decb4292a | Triage

Sharing

General

Target

ed1c0d1850a2cc21529d449b1d5bdb4a7e1e8f73da44d13bfd3a978decb4292a
Size

96KB
Sample

240903-gg4k2aydnm
MD5

402e5c1e1eb7db97b4bfa05bb87c877e
SHA1

a8051e7a1a0ef39772fc125cd3ab2052923cdd99
SHA256

ed1c0d1850a2cc21529d449b1d5bdb4a7e1e8f73da44d13bfd3a978decb4292a
SHA512

ff262ad1f08242e4fe61297a6fc8ad64ad2643372db3e52367a602001c00b4a1443d42a9c9d2e843d9ac029403fabd1d2885af0c4c00d9560d18fc5df3ba8765
SSDEEP

1536:WJPbxuit4aZLPoYAVhgdhYHWWGW/WnA6nRslyFFfUN1Avhw6JCMd:0PbxuiX1PBAkdWVt/WnA6n+yFFfUrQlZ

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ed1c0d1850a2cc21529d449b1d5bdb4a7e1e8f73da44d13bfd3a978decb4292a
- Size
  
  96KB
- MD5
  
  402e5c1e1eb7db97b4bfa05bb87c877e
- SHA1
  
  a8051e7a1a0ef39772fc125cd3ab2052923cdd99
- SHA256
  
  ed1c0d1850a2cc21529d449b1d5bdb4a7e1e8f73da44d13bfd3a978decb4292a
- SHA512
  
  ff262ad1f08242e4fe61297a6fc8ad64ad2643372db3e52367a602001c00b4a1443d42a9c9d2e843d9ac029403fabd1d2885af0c4c00d9560d18fc5df3ba8765
- SSDEEP
  
  1536:WJPbxuit4aZLPoYAVhgdhYHWWGW/WnA6nRslyFFfUN1Avhw6JCMd:0PbxuiX1PBAkdWVt/WnA6n+yFFfUrQlZ
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence