7109db00bcd537df11ed7a26071170cdcdffc6b604a0dd011d2b84368ff99365 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e082f0a1801dcf8faebfba7409aa5e60N
Size

664KB
Sample

240911-h1ypkayhng
MD5

e082f0a1801dcf8faebfba7409aa5e60
SHA1

555ed6198bdf2f0a465449cb1cf676c5317130bb
SHA256

7109db00bcd537df11ed7a26071170cdcdffc6b604a0dd011d2b84368ff99365
SHA512

addb52fb13c358ef8099a704862cbbd36a203e6e400190e99b1574a9637f446b044b1a07f1150395a722c25b5c284c609f3cdf09b19fd267801506ecc87b2685
SSDEEP

12288:ZU9IpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmRS:ZU9IW4XWleKWNUir2MhNl6zX3w9As/xi

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e082f0a1801dcf8faebfba7409aa5e60N
- Size
  
  664KB
- MD5
  
  e082f0a1801dcf8faebfba7409aa5e60
- SHA1
  
  555ed6198bdf2f0a465449cb1cf676c5317130bb
- SHA256
  
  7109db00bcd537df11ed7a26071170cdcdffc6b604a0dd011d2b84368ff99365
- SHA512
  
  addb52fb13c358ef8099a704862cbbd36a203e6e400190e99b1574a9637f446b044b1a07f1150395a722c25b5c284c609f3cdf09b19fd267801506ecc87b2685
- SSDEEP
  
  12288:ZU9IpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmRS:ZU9IW4XWleKWNUir2MhNl6zX3w9As/xi
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence