3425b19a6da17ded17523006e91eecdbc707f2139b9c8c28257956192f88a084 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3425b19a6da17ded17523006e91eecdbc707f2139b9c8c28257956192f88a084
Size

96KB
Sample

240907-y8sfhstapk
MD5

243f295deb62797e858f69e64be1e91f
SHA1

fb44f650a504213cc2f2233200c31882d715833e
SHA256

3425b19a6da17ded17523006e91eecdbc707f2139b9c8c28257956192f88a084
SHA512

5f20b7540a487b5dead1b4b5e706422500750349c304c6c196b685f456de21b8f2aba316c575ff4ae34419b3ce90f4c83bf3efac4aa36464c1419a3cd45b7279
SSDEEP

1536:CFja+gd6e4S+4LyT9EBw0JwNYSztZ89A1aEyQ5c414ksN/BOmKICMy0QiLiizHNT:CVNgUe4S+4LyR0w0JwNYqH15c414j5Ok

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3425b19a6da17ded17523006e91eecdbc707f2139b9c8c28257956192f88a084
- Size
  
  96KB
- MD5
  
  243f295deb62797e858f69e64be1e91f
- SHA1
  
  fb44f650a504213cc2f2233200c31882d715833e
- SHA256
  
  3425b19a6da17ded17523006e91eecdbc707f2139b9c8c28257956192f88a084
- SHA512
  
  5f20b7540a487b5dead1b4b5e706422500750349c304c6c196b685f456de21b8f2aba316c575ff4ae34419b3ce90f4c83bf3efac4aa36464c1419a3cd45b7279
- SSDEEP
  
  1536:CFja+gd6e4S+4LyT9EBw0JwNYSztZ89A1aEyQ5c414ksN/BOmKICMy0QiLiizHNT:CVNgUe4S+4LyR0w0JwNYqH15c414j5Ok
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence