714e2752997290fdd3871ea510a624a998ced02e114456c0c5faeb9e767a63e4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c70e0d5332f982f7d527a5f655a106d0N
Size

285KB
Sample

240907-vp12rsvclq
MD5

c70e0d5332f982f7d527a5f655a106d0
SHA1

99bc8d9adcd66f3f72df563e804f1783ebf68022
SHA256

714e2752997290fdd3871ea510a624a998ced02e114456c0c5faeb9e767a63e4
SHA512

e28b05b754973b12b4191adbffb040f2bbd05072bb31340e628290b132fe775e29167fc88e731973349a28ba9294ce34234eada72348af6f524babff324702cc
SSDEEP

3072:F3d0WHR8k4SGs0lUfaebKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:Bd0Y4SGCbKQIoi7tWa

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c70e0d5332f982f7d527a5f655a106d0N
- Size
  
  285KB
- MD5
  
  c70e0d5332f982f7d527a5f655a106d0
- SHA1
  
  99bc8d9adcd66f3f72df563e804f1783ebf68022
- SHA256
  
  714e2752997290fdd3871ea510a624a998ced02e114456c0c5faeb9e767a63e4
- SHA512
  
  e28b05b754973b12b4191adbffb040f2bbd05072bb31340e628290b132fe775e29167fc88e731973349a28ba9294ce34234eada72348af6f524babff324702cc
- SSDEEP
  
  3072:F3d0WHR8k4SGs0lUfaebKVcbMloVRr3uMg0kAqSxYiJ2QM4GKch:Bd0Y4SGCbKQIoi7tWa
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence