0e466979079404fc6dff35b955aadca1c786d7c8a0beefb1b9ffe65de25e61ea | Triage

Sharing

General

Target

5fdf08c61579256ca85672f5abd76120N
Size

264KB
Sample

240912-d4blzsyhlj
MD5

5fdf08c61579256ca85672f5abd76120
SHA1

9a9a90b05badd2c80ee50cde5f5e1c41188d3c63
SHA256

0e466979079404fc6dff35b955aadca1c786d7c8a0beefb1b9ffe65de25e61ea
SHA512

bd239a8ba84780a339d640bfcb10c097f99485a065768c1b87fb055d7b3f4e7fc4b87f0c2131a15de8ca1058449dff491964706fd7c4b6579b28a7a6b0b20cdb
SSDEEP

6144:L4VGwjFZrBqRqpui6yYPaIGckZay1aEI9Kq5pui6yYPaIGckv:L4VGw3BqYpV6yYPOn17IpV6yYPo

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5fdf08c61579256ca85672f5abd76120N
- Size
  
  264KB
- MD5
  
  5fdf08c61579256ca85672f5abd76120
- SHA1
  
  9a9a90b05badd2c80ee50cde5f5e1c41188d3c63
- SHA256
  
  0e466979079404fc6dff35b955aadca1c786d7c8a0beefb1b9ffe65de25e61ea
- SHA512
  
  bd239a8ba84780a339d640bfcb10c097f99485a065768c1b87fb055d7b3f4e7fc4b87f0c2131a15de8ca1058449dff491964706fd7c4b6579b28a7a6b0b20cdb
- SSDEEP
  
  6144:L4VGwjFZrBqRqpui6yYPaIGckZay1aEI9Kq5pui6yYPaIGckv:L4VGw3BqYpV6yYPOn17IpV6yYPo
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence