1466a9bb4ce9adb8e023f3753f777b23fd7d0d8eeea170bdd4e1da4eab886bae | Triage

Sharing

General

Target

1466a9bb4ce9adb8e023f3753f777b23fd7d0d8eeea170bdd4e1da4eab886bae
Size

128KB
Sample

240903-xlrp2avfpf
MD5

9847c6324a39d0cd7ff14f9299a04360
SHA1

f471ec1015b97ced0aa34581beb1a799b7b84882
SHA256

1466a9bb4ce9adb8e023f3753f777b23fd7d0d8eeea170bdd4e1da4eab886bae
SHA512

600033d92f5b43de4355742cb8ad6d121772554b11bfa67602aa60138f766382a48c9f92a3f944bf23fd8ab4c19e457a4c69672078e8c8cada9ce00cf3e8e1b8
SSDEEP

3072:WUkewKuC5kuDFYK654grqEznYfzB9BSwW:DWKt5kSYygrqYOzLc

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  1466a9bb4ce9adb8e023f3753f777b23fd7d0d8eeea170bdd4e1da4eab886bae
- Size
  
  128KB
- MD5
  
  9847c6324a39d0cd7ff14f9299a04360
- SHA1
  
  f471ec1015b97ced0aa34581beb1a799b7b84882
- SHA256
  
  1466a9bb4ce9adb8e023f3753f777b23fd7d0d8eeea170bdd4e1da4eab886bae
- SHA512
  
  600033d92f5b43de4355742cb8ad6d121772554b11bfa67602aa60138f766382a48c9f92a3f944bf23fd8ab4c19e457a4c69672078e8c8cada9ce00cf3e8e1b8
- SSDEEP
  
  3072:WUkewKuC5kuDFYK654grqEznYfzB9BSwW:DWKt5kSYygrqYOzLc
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence