2a25add525a2f8bc6b1a8c3b0f8af393c7cd21f4acf4ed1c8ab2c43255521ded | Triage

Sharing

General

Target

9b2088e3d459615acc656608cea0da10N
Size

123KB
Sample

240908-pllj1syang
MD5

9b2088e3d459615acc656608cea0da10
SHA1

2e6c71a6f7ff6c41e93292ec3745cd89f70c1bfb
SHA256

2a25add525a2f8bc6b1a8c3b0f8af393c7cd21f4acf4ed1c8ab2c43255521ded
SHA512

e9692ab5b18bf47bf3ae75260d9571255d5d158d9e772f87fc9a818b712700817036b571d4e10e21b3f9fc8364ab8ee6ae86f15a8577a176c17132af30319d92
SSDEEP

3072:3VI+kJ14tBLhRlFIAQS/jMELByRYSa9rR85DEn5k7r8:3VI+kJ+RlFIAQSYELBy4rQD85k/8

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9b2088e3d459615acc656608cea0da10N
- Size
  
  123KB
- MD5
  
  9b2088e3d459615acc656608cea0da10
- SHA1
  
  2e6c71a6f7ff6c41e93292ec3745cd89f70c1bfb
- SHA256
  
  2a25add525a2f8bc6b1a8c3b0f8af393c7cd21f4acf4ed1c8ab2c43255521ded
- SHA512
  
  e9692ab5b18bf47bf3ae75260d9571255d5d158d9e772f87fc9a818b712700817036b571d4e10e21b3f9fc8364ab8ee6ae86f15a8577a176c17132af30319d92
- SSDEEP
  
  3072:3VI+kJ14tBLhRlFIAQS/jMELByRYSa9rR85DEn5k7r8:3VI+kJ+RlFIAQSYELBy4rQD85k/8
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence