d0addb08d844426e876ff1c563e8346904a313a5f3c34e619d4d5454db2f5b1c | Triage

Sharing

General

Target

e49dca899177729ee27a05b2ae953690N
Size

84KB
Sample

240909-prnxbszgjf
MD5

e49dca899177729ee27a05b2ae953690
SHA1

5e45fe9f922496c0c3e0d8cf8ef1272da72cc0fc
SHA256

d0addb08d844426e876ff1c563e8346904a313a5f3c34e619d4d5454db2f5b1c
SHA512

b394f7b6c7cff1e24dd8ab1101014fc4974810e0e757dadbd66608a1c6f513f8f3d69dd02f7accee538bb50924a7b94d5720e3327554e6f838cc5004286f8a6d
SSDEEP

1536:6QPP4ywU1t30ugqcInpA0oU9gAB/n8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmA:hbwUb0uLcAppt/f3PDyH6n8djlLYR7xT

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e49dca899177729ee27a05b2ae953690N
- Size
  
  84KB
- MD5
  
  e49dca899177729ee27a05b2ae953690
- SHA1
  
  5e45fe9f922496c0c3e0d8cf8ef1272da72cc0fc
- SHA256
  
  d0addb08d844426e876ff1c563e8346904a313a5f3c34e619d4d5454db2f5b1c
- SHA512
  
  b394f7b6c7cff1e24dd8ab1101014fc4974810e0e757dadbd66608a1c6f513f8f3d69dd02f7accee538bb50924a7b94d5720e3327554e6f838cc5004286f8a6d
- SSDEEP
  
  1536:6QPP4ywU1t30ugqcInpA0oU9gAB/n8ANZLvfPDyH6n8dEelLYR7xeGSmUmmmmmmA:hbwUb0uLcAppt/f3PDyH6n8djlLYR7xT
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence