6af0535dc183d0950844c91970e75bb08dce061e82389d890c57567d61dde7d4 | Triage

Sharing

General

Target

b758ab496e065a5f11d4bfaab5fc5b30N
Size

224KB
Sample

240907-1kynqszakc
MD5

b758ab496e065a5f11d4bfaab5fc5b30
SHA1

72dfa2850f6f541653dc6489296b000947005028
SHA256

6af0535dc183d0950844c91970e75bb08dce061e82389d890c57567d61dde7d4
SHA512

83c8735424d9600a5d822482c10d33c3a5936dc46ecc984b2622dfcdad23f0cc1f197193f78a1ef9b9a7172abd384470c063edb1627984b57a5ab6ecb3c27e48
SSDEEP

3072:Js2MU/P0pQ3SGTlP2OnjJd976HRy6TluWHnjJd976HRyFbLJorvWHnjJvBxjUSmM:JWU/PkQ3Hlp4PlXj4IyqrQ///NR5fL4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b758ab496e065a5f11d4bfaab5fc5b30N
- Size
  
  224KB
- MD5
  
  b758ab496e065a5f11d4bfaab5fc5b30
- SHA1
  
  72dfa2850f6f541653dc6489296b000947005028
- SHA256
  
  6af0535dc183d0950844c91970e75bb08dce061e82389d890c57567d61dde7d4
- SHA512
  
  83c8735424d9600a5d822482c10d33c3a5936dc46ecc984b2622dfcdad23f0cc1f197193f78a1ef9b9a7172abd384470c063edb1627984b57a5ab6ecb3c27e48
- SSDEEP
  
  3072:Js2MU/P0pQ3SGTlP2OnjJd976HRy6TluWHnjJd976HRyFbLJorvWHnjJvBxjUSmM:JWU/PkQ3Hlp4PlXj4IyqrQ///NR5fL4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence