c84ff692d460e79f2ee8521bc08d228ce72123142f6257c28aa1119cd9fca210 | Triage

Sharing

General

Target

54412aac96b615a609ab11326e5f6eb0N
Size

1000KB
Sample

240911-edkbwa1cmj
MD5

54412aac96b615a609ab11326e5f6eb0
SHA1

aaf2f0161bb4d8b81c57c98a02497de06ae2b3a3
SHA256

c84ff692d460e79f2ee8521bc08d228ce72123142f6257c28aa1119cd9fca210
SHA512

fa20a0c966da1cd7ee990c227fc791ee4a0cb0d55cc16394f6a9dec92a2cc0ed6a129d0c0665d97741e55c8f54e5560eb88eb38769a427af729dd2d1a5e69ddc
SSDEEP

12288:CtiZsYFtHBFLPj3TmLnWrOxNuxC97hFq9o7:ci2YFtHBFLPj368MoC9Dq9o7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  54412aac96b615a609ab11326e5f6eb0N
- Size
  
  1000KB
- MD5
  
  54412aac96b615a609ab11326e5f6eb0
- SHA1
  
  aaf2f0161bb4d8b81c57c98a02497de06ae2b3a3
- SHA256
  
  c84ff692d460e79f2ee8521bc08d228ce72123142f6257c28aa1119cd9fca210
- SHA512
  
  fa20a0c966da1cd7ee990c227fc791ee4a0cb0d55cc16394f6a9dec92a2cc0ed6a129d0c0665d97741e55c8f54e5560eb88eb38769a427af729dd2d1a5e69ddc
- SSDEEP
  
  12288:CtiZsYFtHBFLPj3TmLnWrOxNuxC97hFq9o7:ci2YFtHBFLPj368MoC9Dq9o7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence