a8edc9738addd90f3d4eb9adb6938a32f9ea3a9eb75a1263d04a31ca96492190 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6762d89b039a0defe03fec7f312da780N
Size

314KB
Sample

240908-mvefysthlb
MD5

6762d89b039a0defe03fec7f312da780
SHA1

9efd134802d8ddd0a80be9d94affe979a69eff1c
SHA256

a8edc9738addd90f3d4eb9adb6938a32f9ea3a9eb75a1263d04a31ca96492190
SHA512

18c10bdd6775db67cd5519a40dbc1929b47a3edac79eb00a62bccf6a663198260e7ff9f5808ac0863782b492facf4231838aa36ac5262b207ea63987fabfadb2
SSDEEP

6144:D/sPVYIdelj6MB8MhjwszeXmr8SeNpgdyuH1lFDjC:Dgq6Najb87gP3C

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6762d89b039a0defe03fec7f312da780N
- Size
  
  314KB
- MD5
  
  6762d89b039a0defe03fec7f312da780
- SHA1
  
  9efd134802d8ddd0a80be9d94affe979a69eff1c
- SHA256
  
  a8edc9738addd90f3d4eb9adb6938a32f9ea3a9eb75a1263d04a31ca96492190
- SHA512
  
  18c10bdd6775db67cd5519a40dbc1929b47a3edac79eb00a62bccf6a663198260e7ff9f5808ac0863782b492facf4231838aa36ac5262b207ea63987fabfadb2
- SSDEEP
  
  6144:D/sPVYIdelj6MB8MhjwszeXmr8SeNpgdyuH1lFDjC:Dgq6Najb87gP3C
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence