4dad6a5b95f720c3553ba853fcb6c776e25fb40dfaf592e0edae6b66c5245958 | Triage

Sharing

General

Target

4dad6a5b95f720c3553ba853fcb6c776e25fb40dfaf592e0edae6b66c5245958
Size

77KB
Sample

240912-2cparsybml
MD5

1d055cb785c87c8319bba673dfbb0893
SHA1

8c7f3f6950ddd0cb33249a0d4744f0e4dbbc7a7a
SHA256

4dad6a5b95f720c3553ba853fcb6c776e25fb40dfaf592e0edae6b66c5245958
SHA512

047528d627a130f403c8d98139c38e3ce601e5982ccc913b0fa7e37933d2c22635d7f8f08a91a9b8993d6994de0b6ada9e211ab74fd7d34ed5a7c893d3a8698f
SSDEEP

1536:fSw0NH86knMmExz1ddMIJWeI2Ltrwfi+TjRC/D:fSw0NH8tjIz1dd/pZtwf1TjYD

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  4dad6a5b95f720c3553ba853fcb6c776e25fb40dfaf592e0edae6b66c5245958
- Size
  
  77KB
- MD5
  
  1d055cb785c87c8319bba673dfbb0893
- SHA1
  
  8c7f3f6950ddd0cb33249a0d4744f0e4dbbc7a7a
- SHA256
  
  4dad6a5b95f720c3553ba853fcb6c776e25fb40dfaf592e0edae6b66c5245958
- SHA512
  
  047528d627a130f403c8d98139c38e3ce601e5982ccc913b0fa7e37933d2c22635d7f8f08a91a9b8993d6994de0b6ada9e211ab74fd7d34ed5a7c893d3a8698f
- SSDEEP
  
  1536:fSw0NH86knMmExz1ddMIJWeI2Ltrwfi+TjRC/D:fSw0NH8tjIz1dd/pZtwf1TjYD
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence