7b5e3517907ec94427dbb664923f1ec805e1162ab6b177866225a6856fde3587 | Triage

Sharing

General

Target

be36567dd38b9fba2f5ad757c9636a60N
Size

295KB
Sample

240911-shxpnaxflh
MD5

be36567dd38b9fba2f5ad757c9636a60
SHA1

3a4303e9f29eebf01eb768324cfcc4489c4f7972
SHA256

7b5e3517907ec94427dbb664923f1ec805e1162ab6b177866225a6856fde3587
SHA512

9d1a1fba5625bc98766988c6b191e5dc3ed117e2f6fdbd22952902e0509e3a1822fa6ed6d2bb4263d77adc2d691ce200d5bec756d35040957ff9613f4c4a4175
SSDEEP

6144:UO+iZDtZVEF5eOr1PY1PRe19V+tbFOLM77OLY:UtiZsYy6fe0tsNM

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  be36567dd38b9fba2f5ad757c9636a60N
- Size
  
  295KB
- MD5
  
  be36567dd38b9fba2f5ad757c9636a60
- SHA1
  
  3a4303e9f29eebf01eb768324cfcc4489c4f7972
- SHA256
  
  7b5e3517907ec94427dbb664923f1ec805e1162ab6b177866225a6856fde3587
- SHA512
  
  9d1a1fba5625bc98766988c6b191e5dc3ed117e2f6fdbd22952902e0509e3a1822fa6ed6d2bb4263d77adc2d691ce200d5bec756d35040957ff9613f4c4a4175
- SSDEEP
  
  6144:UO+iZDtZVEF5eOr1PY1PRe19V+tbFOLM77OLY:UtiZsYy6fe0tsNM
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence