e6bdba8c80b8c0efcb72b8a9612f88d592cbb19cee197e08bda4e88a4a02f046 | Triage

Sharing

General

Target

e6bdba8c80b8c0efcb72b8a9612f88d592cbb19cee197e08bda4e88a4a02f046
Size

94KB
Sample

240912-c85j7axdjd
MD5

1b4dfa58d176675569720ff9dfa1aa17
SHA1

fdf2a97431306387811f458b095f556be6bc737d
SHA256

e6bdba8c80b8c0efcb72b8a9612f88d592cbb19cee197e08bda4e88a4a02f046
SHA512

095eaea8c5d6296e4b3490d11505125e6e2793a0b721392a08367b212f02843ec378c0422e11673766759b226b90e22706a2fbc88d7ef0ba0f9c8e4eca96cefa
SSDEEP

1536:S+WycPzqC01cJ6RIOzaF66Wcik3+T1PG0P/rJzqJtU7BR9L4DT2EnINs:SDzq4J6dSlWHk3SPHcJ+6+ob

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e6bdba8c80b8c0efcb72b8a9612f88d592cbb19cee197e08bda4e88a4a02f046
- Size
  
  94KB
- MD5
  
  1b4dfa58d176675569720ff9dfa1aa17
- SHA1
  
  fdf2a97431306387811f458b095f556be6bc737d
- SHA256
  
  e6bdba8c80b8c0efcb72b8a9612f88d592cbb19cee197e08bda4e88a4a02f046
- SHA512
  
  095eaea8c5d6296e4b3490d11505125e6e2793a0b721392a08367b212f02843ec378c0422e11673766759b226b90e22706a2fbc88d7ef0ba0f9c8e4eca96cefa
- SSDEEP
  
  1536:S+WycPzqC01cJ6RIOzaF66Wcik3+T1PG0P/rJzqJtU7BR9L4DT2EnINs:SDzq4J6dSlWHk3SPHcJ+6+ob
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence