4870ede9c139c0d5f3ff5e824aa906807f7d339da6e5277a563325b895717a59 | Triage

Sharing

General

Target

b97778478af409560af77afdcb6ee6f0N
Size

64KB
Sample

240911-nftsrsxhqe
MD5

b97778478af409560af77afdcb6ee6f0
SHA1

6f65b9736a84790039ad576ce70c2d1c3d323e27
SHA256

4870ede9c139c0d5f3ff5e824aa906807f7d339da6e5277a563325b895717a59
SHA512

e56e1c58d92b501501005c6b659570259e83a7b4396953d30df4a19fc5a18933cb295d89cadc386ed9f307a513470e0e5775a3025f19b068b02a328496e98c7f
SSDEEP

1536:XTMoCthX+LUCMK+NCp4bcYFWy1NrPFW2iwTbW:XTMzO4CMK+NCp4g4X1ZFW2VTbW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b97778478af409560af77afdcb6ee6f0N
- Size
  
  64KB
- MD5
  
  b97778478af409560af77afdcb6ee6f0
- SHA1
  
  6f65b9736a84790039ad576ce70c2d1c3d323e27
- SHA256
  
  4870ede9c139c0d5f3ff5e824aa906807f7d339da6e5277a563325b895717a59
- SHA512
  
  e56e1c58d92b501501005c6b659570259e83a7b4396953d30df4a19fc5a18933cb295d89cadc386ed9f307a513470e0e5775a3025f19b068b02a328496e98c7f
- SSDEEP
  
  1536:XTMoCthX+LUCMK+NCp4bcYFWy1NrPFW2iwTbW:XTMzO4CMK+NCp4g4X1ZFW2VTbW
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence