47bc4df671d8b6a10a68f1fd686265d17eeff13aba103251d4c33973d9de02ed | Triage

Sharing

General

Target

fe0b18bac80d6e6ab6f3a52717dd36c0N
Size

59KB
Sample

240908-man5nazhkp
MD5

fe0b18bac80d6e6ab6f3a52717dd36c0
SHA1

44f709d181a0819f6758892e07aa2306913838a3
SHA256

47bc4df671d8b6a10a68f1fd686265d17eeff13aba103251d4c33973d9de02ed
SHA512

f7121c63d6c5872dcefb1457b66bc9daeafcf9e2af4b37617e96e99d38cc293fd6c9c41e4e30c57b984df5ce6a5361295f789158f33ac8344249aaabc7b2e0ba
SSDEEP

768:VHexeRtorjXMTjxnT5S61rNWIBuUZlPVjv0O7R02p8x9AapuqZ/1H5K5nf1fZMEg:+oqMTjlcKttVjv0O7R/8x9Aa1ENCyVs

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fe0b18bac80d6e6ab6f3a52717dd36c0N
- Size
  
  59KB
- MD5
  
  fe0b18bac80d6e6ab6f3a52717dd36c0
- SHA1
  
  44f709d181a0819f6758892e07aa2306913838a3
- SHA256
  
  47bc4df671d8b6a10a68f1fd686265d17eeff13aba103251d4c33973d9de02ed
- SHA512
  
  f7121c63d6c5872dcefb1457b66bc9daeafcf9e2af4b37617e96e99d38cc293fd6c9c41e4e30c57b984df5ce6a5361295f789158f33ac8344249aaabc7b2e0ba
- SSDEEP
  
  768:VHexeRtorjXMTjxnT5S61rNWIBuUZlPVjv0O7R02p8x9AapuqZ/1H5K5nf1fZMEg:+oqMTjlcKttVjv0O7R/8x9Aa1ENCyVs
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence