2b570d28cfa4a4005b3fc2f817547eb640bd3cbce1188608f7db60451183fe3a | Triage

Sharing

General

Target

2b570d28cfa4a4005b3fc2f817547eb640bd3cbce1188608f7db60451183fe3a
Size

160KB
Sample

240909-ypvfrsxbpr
MD5

9dcdc7e4343d4532fc4521f313c7a780
SHA1

3fdd6348893ae31b484c9821547ffd0e3ce32180
SHA256

2b570d28cfa4a4005b3fc2f817547eb640bd3cbce1188608f7db60451183fe3a
SHA512

16f9b0c22166f6cc4a0bd416ecf7812a4328c3df2978870b0c2a95875bec470a4618b51b2f29830c8ce28bf20a2372208298941c16a88316d8c3330a8fd155a5
SSDEEP

3072:UmEEt+ZbHmpefarlOGA8d2E2fAYjmjRrz3h:U+STpfRXE2fAEGh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2b570d28cfa4a4005b3fc2f817547eb640bd3cbce1188608f7db60451183fe3a
- Size
  
  160KB
- MD5
  
  9dcdc7e4343d4532fc4521f313c7a780
- SHA1
  
  3fdd6348893ae31b484c9821547ffd0e3ce32180
- SHA256
  
  2b570d28cfa4a4005b3fc2f817547eb640bd3cbce1188608f7db60451183fe3a
- SHA512
  
  16f9b0c22166f6cc4a0bd416ecf7812a4328c3df2978870b0c2a95875bec470a4618b51b2f29830c8ce28bf20a2372208298941c16a88316d8c3330a8fd155a5
- SSDEEP
  
  3072:UmEEt+ZbHmpefarlOGA8d2E2fAYjmjRrz3h:U+STpfRXE2fAEGh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence