751426fd9f87314f9da1fe62deddfa31e918725d547d33e26e434cb2c94bf578 | Triage

Sharing

General

Target

4938a0d9eebe5b7a60c2f703fb5d92a0N
Size

314KB
Sample

240907-xaqnla1bph
MD5

4938a0d9eebe5b7a60c2f703fb5d92a0
SHA1

ee432b9a31d773bd0d69a01250e3411942857809
SHA256

751426fd9f87314f9da1fe62deddfa31e918725d547d33e26e434cb2c94bf578
SHA512

e031a98de7ed37a9cfedd17a2122ea5c4308d6c35d6fed4129a55cd800cde7fe8a6406bb717bb786d3d0b006b1bb6e7277ffa3331d93e23a17b6ac8a67df9476
SSDEEP

6144:iHkCX5R5pj6MB8MhjwszeXmr8SeNpgdyuH1lFDjC:iHpXj6Najb87gP3C

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  4938a0d9eebe5b7a60c2f703fb5d92a0N
- Size
  
  314KB
- MD5
  
  4938a0d9eebe5b7a60c2f703fb5d92a0
- SHA1
  
  ee432b9a31d773bd0d69a01250e3411942857809
- SHA256
  
  751426fd9f87314f9da1fe62deddfa31e918725d547d33e26e434cb2c94bf578
- SHA512
  
  e031a98de7ed37a9cfedd17a2122ea5c4308d6c35d6fed4129a55cd800cde7fe8a6406bb717bb786d3d0b006b1bb6e7277ffa3331d93e23a17b6ac8a67df9476
- SSDEEP
  
  6144:iHkCX5R5pj6MB8MhjwszeXmr8SeNpgdyuH1lFDjC:iHpXj6Najb87gP3C
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence