fe01b92794805f41931d81a1958ccd43d986e6a3d012219084c6b4014a420841 | Triage

Sharing

General

Target

fe01b92794805f41931d81a1958ccd43d986e6a3d012219084c6b4014a420841
Size

67KB
Sample

240903-hl8k8azfpj
MD5

eee4207ed42455d8df6553215c1bfed5
SHA1

3bf5161f0d3afea08296728ddb56a3348399ad26
SHA256

fe01b92794805f41931d81a1958ccd43d986e6a3d012219084c6b4014a420841
SHA512

feecd72f71c7662315c5ac891399b88f39b92662082bc4f598865a84c589fdff4776400d39be38745054419a1157125d9ecadeb5eb3eebe007d20b9abe7fb09b
SSDEEP

1536:VbS4S09TPvDyd+cFMinCYkkDZFmR3w+b+qX6SAPNRQxR/Rj:JS4SYjvAFMdYk4K35aw6SAPNexVx

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fe01b92794805f41931d81a1958ccd43d986e6a3d012219084c6b4014a420841
- Size
  
  67KB
- MD5
  
  eee4207ed42455d8df6553215c1bfed5
- SHA1
  
  3bf5161f0d3afea08296728ddb56a3348399ad26
- SHA256
  
  fe01b92794805f41931d81a1958ccd43d986e6a3d012219084c6b4014a420841
- SHA512
  
  feecd72f71c7662315c5ac891399b88f39b92662082bc4f598865a84c589fdff4776400d39be38745054419a1157125d9ecadeb5eb3eebe007d20b9abe7fb09b
- SSDEEP
  
  1536:VbS4S09TPvDyd+cFMinCYkkDZFmR3w+b+qX6SAPNRQxR/Rj:JS4SYjvAFMdYk4K35aw6SAPNexVx
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence