d10954902540c248eead4f7a52afc0d14611636cf7b475e96bcbe67d3f905c02 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d10954902540c248eead4f7a52afc0d14611636cf7b475e96bcbe67d3f905c02
Size

94KB
Sample

240908-c5xp6szgpp
MD5

ae4e6047b500663d8e5698d9bad1f693
SHA1

570499ddeddc224508dddd844e6efca0e4edc7fc
SHA256

d10954902540c248eead4f7a52afc0d14611636cf7b475e96bcbe67d3f905c02
SHA512

65503d98aec308d0b9b5cc568559d751d97d3743d9509288e79c1449e2b7a4f857bb2fa83048ab415ec6f47ac431765d55731a9eea1cc8f0f244b94172962d46
SSDEEP

1536:6je6/Qy0S7u0utTYsLky9n24CijM1211ryNvwrnxr2YRVkeyyVr3iwcH2ogHx:6jf8SIx1LkCn2FL1W12NYr12Y3kremwf

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d10954902540c248eead4f7a52afc0d14611636cf7b475e96bcbe67d3f905c02
- Size
  
  94KB
- MD5
  
  ae4e6047b500663d8e5698d9bad1f693
- SHA1
  
  570499ddeddc224508dddd844e6efca0e4edc7fc
- SHA256
  
  d10954902540c248eead4f7a52afc0d14611636cf7b475e96bcbe67d3f905c02
- SHA512
  
  65503d98aec308d0b9b5cc568559d751d97d3743d9509288e79c1449e2b7a4f857bb2fa83048ab415ec6f47ac431765d55731a9eea1cc8f0f244b94172962d46
- SSDEEP
  
  1536:6je6/Qy0S7u0utTYsLky9n24CijM1211ryNvwrnxr2YRVkeyyVr3iwcH2ogHx:6jf8SIx1LkCn2FL1W12NYr12Y3kremwf
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence