0d2aa44e5a779ecd0c6b1bc3adcd3cd6ab85c97527e7ea1bd3b201c3e2d8583b | Triage

Sharing

General

Target

0d2aa44e5a779ecd0c6b1bc3adcd3cd6ab85c97527e7ea1bd3b201c3e2d8583b
Size

59KB
Sample

240907-xbggba1cje
MD5

cd665f756c5e3cc88723fb39a951f093
SHA1

5c7532bc9552b5b8183ed75943c53e9c48814221
SHA256

0d2aa44e5a779ecd0c6b1bc3adcd3cd6ab85c97527e7ea1bd3b201c3e2d8583b
SHA512

cff8b0f88efa83829e284399b231d1ca8ca81600feb6a9822a8c41cccda7f380d1cd8813d17780c243a5e6ea24bd9117a5cc834cf482fff4ec884604589a938e
SSDEEP

768:Hzabc8fOoUzpBh3IVxeobaNXyFHRNnB5hdAEJZ/1H5zr5nf1fZMEBFELvkVgFR:H2bc8fOokHUxQSljdlB9FNCyVs

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0d2aa44e5a779ecd0c6b1bc3adcd3cd6ab85c97527e7ea1bd3b201c3e2d8583b
- Size
  
  59KB
- MD5
  
  cd665f756c5e3cc88723fb39a951f093
- SHA1
  
  5c7532bc9552b5b8183ed75943c53e9c48814221
- SHA256
  
  0d2aa44e5a779ecd0c6b1bc3adcd3cd6ab85c97527e7ea1bd3b201c3e2d8583b
- SHA512
  
  cff8b0f88efa83829e284399b231d1ca8ca81600feb6a9822a8c41cccda7f380d1cd8813d17780c243a5e6ea24bd9117a5cc834cf482fff4ec884604589a938e
- SSDEEP
  
  768:Hzabc8fOoUzpBh3IVxeobaNXyFHRNnB5hdAEJZ/1H5zr5nf1fZMEBFELvkVgFR:H2bc8fOokHUxQSljdlB9FNCyVs
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence