fa396d870e4e72dba5d6555cd88931a3507e6feafc5b404317df6d47c4c98114 | Triage

Sharing

General

Target

fa396d870e4e72dba5d6555cd88931a3507e6feafc5b404317df6d47c4c98114
Size

80KB
Sample

240911-rwkftawdla
MD5

1f833935d4f7635ad99d9993e4744f69
SHA1

bc4213097e5b2efc7f1a7d1c03b0265cd5488a06
SHA256

fa396d870e4e72dba5d6555cd88931a3507e6feafc5b404317df6d47c4c98114
SHA512

1be0dcbcfac946a5c6faac9d8d7b9bfed6b0dff0eca21e60f83450a80e0b61376dbe55256ff88cad8528cc207be1828b2b070901fc55a015a9fe9f5169e8215a
SSDEEP

1536:CCUf3CchRLyvUl/jfqEEWIWnzgacs1cgCe8uvQGYQzlVZgs:439WvwLCzWnhcsugCe8uvQa7gs

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fa396d870e4e72dba5d6555cd88931a3507e6feafc5b404317df6d47c4c98114
- Size
  
  80KB
- MD5
  
  1f833935d4f7635ad99d9993e4744f69
- SHA1
  
  bc4213097e5b2efc7f1a7d1c03b0265cd5488a06
- SHA256
  
  fa396d870e4e72dba5d6555cd88931a3507e6feafc5b404317df6d47c4c98114
- SHA512
  
  1be0dcbcfac946a5c6faac9d8d7b9bfed6b0dff0eca21e60f83450a80e0b61376dbe55256ff88cad8528cc207be1828b2b070901fc55a015a9fe9f5169e8215a
- SSDEEP
  
  1536:CCUf3CchRLyvUl/jfqEEWIWnzgacs1cgCe8uvQGYQzlVZgs:439WvwLCzWnhcsugCe8uvQa7gs
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence