e1c0734cc667ac700ba1e95da2185caa19d002b775507638208ba1dc4a7f5f99 | Triage

Sharing

General

Target

4b4267806c13daa2299e2f53d3758af0N
Size

9.6MB
Sample

240911-d65mvazhkk
MD5

4b4267806c13daa2299e2f53d3758af0
SHA1

a4ff8e1151507498c739b610630df1492863173c
SHA256

e1c0734cc667ac700ba1e95da2185caa19d002b775507638208ba1dc4a7f5f99
SHA512

f49e46d13ad0a753e5667b302dbcbda3e6d98e0d4e5c76e84016df5bf442d7f18f6346570f5b1a9a09049aa2686a3c52c2eefd7ad610d3ea4cca0116c1923ccd
SSDEEP

196608:I3qnhgJuP3LAhCiVXOWv06A1oMuWr45hrr2s:nS+LJ9eJWGhrr2s

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  4b4267806c13daa2299e2f53d3758af0N
- Size
  
  9.6MB
- MD5
  
  4b4267806c13daa2299e2f53d3758af0
- SHA1
  
  a4ff8e1151507498c739b610630df1492863173c
- SHA256
  
  e1c0734cc667ac700ba1e95da2185caa19d002b775507638208ba1dc4a7f5f99
- SHA512
  
  f49e46d13ad0a753e5667b302dbcbda3e6d98e0d4e5c76e84016df5bf442d7f18f6346570f5b1a9a09049aa2686a3c52c2eefd7ad610d3ea4cca0116c1923ccd
- SSDEEP
  
  196608:I3qnhgJuP3LAhCiVXOWv06A1oMuWr45hrr2s:nS+LJ9eJWGhrr2s
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence