a442016a81db4c4614135dce9e89968cfa81e32445b609086d72c452c3a2f441 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a442016a81db4c4614135dce9e89968cfa81e32445b609086d72c452c3a2f441
Size

94KB
Sample

240908-a4welsxbqd
MD5

9e2f59bdee1cfedd95215eb098b7a5d5
SHA1

f9ff85458a142368d3a809ed4044c185c17fc96b
SHA256

a442016a81db4c4614135dce9e89968cfa81e32445b609086d72c452c3a2f441
SHA512

05f38e4718c1f514d4a1506ae5f6c9364385cb123b4bf07f37e8f3d5ad10a6e86e0b5569beea7e84ce26b6db05c510e06ea60f03e6f2de6c90bb8581faa8bc6b
SSDEEP

1536:qzk1sT4O9Ox+yrLHcF4hJq8XlPiacBubLHG87BR9L4DT2EnINs:6AsTGxfrL8FQ/XlPKBum86+ob

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a442016a81db4c4614135dce9e89968cfa81e32445b609086d72c452c3a2f441
- Size
  
  94KB
- MD5
  
  9e2f59bdee1cfedd95215eb098b7a5d5
- SHA1
  
  f9ff85458a142368d3a809ed4044c185c17fc96b
- SHA256
  
  a442016a81db4c4614135dce9e89968cfa81e32445b609086d72c452c3a2f441
- SHA512
  
  05f38e4718c1f514d4a1506ae5f6c9364385cb123b4bf07f37e8f3d5ad10a6e86e0b5569beea7e84ce26b6db05c510e06ea60f03e6f2de6c90bb8581faa8bc6b
- SSDEEP
  
  1536:qzk1sT4O9Ox+yrLHcF4hJq8XlPiacBubLHG87BR9L4DT2EnINs:6AsTGxfrL8FQ/XlPKBum86+ob
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence