7f90d4d669eebe1e358d869ffcc231c74170884d308ad0bd3d7caa6f16ce573f | Triage

Sharing

General

Target

7f90d4d669eebe1e358d869ffcc231c74170884d308ad0bd3d7caa6f16ce573f
Size

128KB
Sample

240909-3e3fvaxenb
MD5

02abb8bb42b7a2e271dfcba102b0fda1
SHA1

6bd9ae67345a3301a49ddb1cfaf3728143753119
SHA256

7f90d4d669eebe1e358d869ffcc231c74170884d308ad0bd3d7caa6f16ce573f
SHA512

76d5a895591845bc3199529aef1353d54f4682cdaffbd54a58fb3ce1391c5c485181815c9d5a0a30686a16b693a6c3a079454d710a205ba81b54912bc17b596d
SSDEEP

3072:z6J+WWNwxJ9IDlRxyhTbhgu+tAcrbFAJc+i:zn2xsDshsrtMk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7f90d4d669eebe1e358d869ffcc231c74170884d308ad0bd3d7caa6f16ce573f
- Size
  
  128KB
- MD5
  
  02abb8bb42b7a2e271dfcba102b0fda1
- SHA1
  
  6bd9ae67345a3301a49ddb1cfaf3728143753119
- SHA256
  
  7f90d4d669eebe1e358d869ffcc231c74170884d308ad0bd3d7caa6f16ce573f
- SHA512
  
  76d5a895591845bc3199529aef1353d54f4682cdaffbd54a58fb3ce1391c5c485181815c9d5a0a30686a16b693a6c3a079454d710a205ba81b54912bc17b596d
- SSDEEP
  
  3072:z6J+WWNwxJ9IDlRxyhTbhgu+tAcrbFAJc+i:zn2xsDshsrtMk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence