394f442cea82a24b19987a163c3854a44ac4f5644de05ab14a9e85284bdb5322 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e534823601d97940af1340fd920b4fb0N
Size

376KB
Sample

240908-ykhw6svflf
MD5

e534823601d97940af1340fd920b4fb0
SHA1

3f3ae19ce2c0827e6807f72d19d867ae05868ef2
SHA256

394f442cea82a24b19987a163c3854a44ac4f5644de05ab14a9e85284bdb5322
SHA512

9a056466c7010b2389d230289a727b51d7658a784276dcdf9d7f4b814db0d871d3a8bb6002ca8b32b21daa7ff8cc47140648b3e4ac493285911e55c8dfd4d27a
SSDEEP

6144:0A8xmQ9qC7oQ0IV/Atl/AtW1OE43V1+25CzRoQ0Ibl4HdE43V1+2:0A8750I2mi4lCzb0IF4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e534823601d97940af1340fd920b4fb0N
- Size
  
  376KB
- MD5
  
  e534823601d97940af1340fd920b4fb0
- SHA1
  
  3f3ae19ce2c0827e6807f72d19d867ae05868ef2
- SHA256
  
  394f442cea82a24b19987a163c3854a44ac4f5644de05ab14a9e85284bdb5322
- SHA512
  
  9a056466c7010b2389d230289a727b51d7658a784276dcdf9d7f4b814db0d871d3a8bb6002ca8b32b21daa7ff8cc47140648b3e4ac493285911e55c8dfd4d27a
- SSDEEP
  
  6144:0A8xmQ9qC7oQ0IV/Atl/AtW1OE43V1+25CzRoQ0Ibl4HdE43V1+2:0A8750I2mi4lCzb0IF4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence