c4cadd9808128c3d9e1c40189b577f3d1d52ad9aaa8cf50ec196e00ec1adde38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4cadd9808128c3d9e1c40189b577f3d1d52ad9aaa8cf50ec196e00ec1adde38
Size

55KB
Sample

240904-npfbqsygqn
MD5

aff6fa04480c0608315817bc396defc4
SHA1

72fe63ad417e1e82f384d2f27774f795706a07e6
SHA256

c4cadd9808128c3d9e1c40189b577f3d1d52ad9aaa8cf50ec196e00ec1adde38
SHA512

e5f58b14d8fbf2786f91b1707ea785d32096268f3d6b198cc932e05ebe7612c6b20156cbf389eac5c23b955f124db7c27ead221babbcbceb2ad8a6e8ebd9b972
SSDEEP

1536:Yrt0xKbWkuPXhiGwedhB2K4btJtxJHGNSoNSd0A3shxD6:Yr6xKSnx8eMK4jt3mNXNW0A8hh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c4cadd9808128c3d9e1c40189b577f3d1d52ad9aaa8cf50ec196e00ec1adde38
- Size
  
  55KB
- MD5
  
  aff6fa04480c0608315817bc396defc4
- SHA1
  
  72fe63ad417e1e82f384d2f27774f795706a07e6
- SHA256
  
  c4cadd9808128c3d9e1c40189b577f3d1d52ad9aaa8cf50ec196e00ec1adde38
- SHA512
  
  e5f58b14d8fbf2786f91b1707ea785d32096268f3d6b198cc932e05ebe7612c6b20156cbf389eac5c23b955f124db7c27ead221babbcbceb2ad8a6e8ebd9b972
- SSDEEP
  
  1536:Yrt0xKbWkuPXhiGwedhB2K4btJtxJHGNSoNSd0A3shxD6:Yr6xKSnx8eMK4jt3mNXNW0A8hh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence