6332cd57c6d6f758f6ecb44d8ee52c58fc4c0920638accf8e51717b6e5675807 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eac35a8c0209537ccd23825c6cc31f0N
Size

314KB
Sample

240908-pdr2tsvgkk
MD5

2eac35a8c0209537ccd23825c6cc31f0
SHA1

f97bb9b97282025dcbd1c1afcd9f92027946f1df
SHA256

6332cd57c6d6f758f6ecb44d8ee52c58fc4c0920638accf8e51717b6e5675807
SHA512

0b2aa391c720fb70efbc9f8452812d8520c1d678ceb231672fc85cfcc21a752366b62dab48a481585e7c6dca2e5ebf979e95b78ae6b720745f303ba310ca0098
SSDEEP

6144:UAMlSyej6MB8MhjwszeXmr8SeNpgdyuH1lFDjC:PUW6Najb87gP3C

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2eac35a8c0209537ccd23825c6cc31f0N
- Size
  
  314KB
- MD5
  
  2eac35a8c0209537ccd23825c6cc31f0
- SHA1
  
  f97bb9b97282025dcbd1c1afcd9f92027946f1df
- SHA256
  
  6332cd57c6d6f758f6ecb44d8ee52c58fc4c0920638accf8e51717b6e5675807
- SHA512
  
  0b2aa391c720fb70efbc9f8452812d8520c1d678ceb231672fc85cfcc21a752366b62dab48a481585e7c6dca2e5ebf979e95b78ae6b720745f303ba310ca0098
- SSDEEP
  
  6144:UAMlSyej6MB8MhjwszeXmr8SeNpgdyuH1lFDjC:PUW6Najb87gP3C
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence