923deb43cd8064341bd3cb8aecf9eaac965ad6e6ca091e361b8cc67c5bb7ee84 | Triage

Sharing

General

Target

923deb43cd8064341bd3cb8aecf9eaac965ad6e6ca091e361b8cc67c5bb7ee84
Size

1.6MB
Sample

240904-a59nmasgpb
MD5

86f04ca09f8b8a6086ad334f2c2d0f0e
SHA1

54f114b54cfec2406b9304288387353e39b0d091
SHA256

923deb43cd8064341bd3cb8aecf9eaac965ad6e6ca091e361b8cc67c5bb7ee84
SHA512

140a1675498b4497b87c9810c0f54891de4efffb394d9790c92fe5fe8bfd8d73ec3b3d8aa38e678aa5f08f6c340f4715cd994b8d17f14d1959340dd02938a0d1
SSDEEP

24576:+2SwwL2vzecI50+YNpsKv2EvZHp3oWB+:+2SwwL2vKcIKLXZ3+

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  923deb43cd8064341bd3cb8aecf9eaac965ad6e6ca091e361b8cc67c5bb7ee84
- Size
  
  1.6MB
- MD5
  
  86f04ca09f8b8a6086ad334f2c2d0f0e
- SHA1
  
  54f114b54cfec2406b9304288387353e39b0d091
- SHA256
  
  923deb43cd8064341bd3cb8aecf9eaac965ad6e6ca091e361b8cc67c5bb7ee84
- SHA512
  
  140a1675498b4497b87c9810c0f54891de4efffb394d9790c92fe5fe8bfd8d73ec3b3d8aa38e678aa5f08f6c340f4715cd994b8d17f14d1959340dd02938a0d1
- SSDEEP
  
  24576:+2SwwL2vzecI50+YNpsKv2EvZHp3oWB+:+2SwwL2vKcIKLXZ3+
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence