0a7363263e5878a8521586554fb08093486534cf1f576b35b9d019178f59f0f4 | Triage

Sharing

General

Target

0a7363263e5878a8521586554fb08093486534cf1f576b35b9d019178f59f0f4
Size

93KB
Sample

240907-w6smdszhqa
MD5

b9d13256353a60eccc9a242e7098b15f
SHA1

f5829ec815b037fe7e10f86edd127f0b69253c94
SHA256

0a7363263e5878a8521586554fb08093486534cf1f576b35b9d019178f59f0f4
SHA512

6e5917375205783171fe546826018cad25a80eaadfecbfc6d44e0c1bd528b29c9b67a383cb677d5132b6c2dee4b96a202c14c5a72139ae3951bf4d04aed67144
SSDEEP

1536:m48fUxcu3gmmxbBajhYLhAtSvyMyvLNTEY0ZQ7sRQpRkRLJzeLD9N0iQGRNQR8RK:m5fIcuQfmYhFvyDZwY0ZQwepSJdEN0si

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0a7363263e5878a8521586554fb08093486534cf1f576b35b9d019178f59f0f4
- Size
  
  93KB
- MD5
  
  b9d13256353a60eccc9a242e7098b15f
- SHA1
  
  f5829ec815b037fe7e10f86edd127f0b69253c94
- SHA256
  
  0a7363263e5878a8521586554fb08093486534cf1f576b35b9d019178f59f0f4
- SHA512
  
  6e5917375205783171fe546826018cad25a80eaadfecbfc6d44e0c1bd528b29c9b67a383cb677d5132b6c2dee4b96a202c14c5a72139ae3951bf4d04aed67144
- SSDEEP
  
  1536:m48fUxcu3gmmxbBajhYLhAtSvyMyvLNTEY0ZQ7sRQpRkRLJzeLD9N0iQGRNQR8RK:m5fIcuQfmYhFvyDZwY0ZQwepSJdEN0si
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence