fea424a9f39d25ee28f3051934f340f07fc57d141e6343a06bde1c051e87679b | Triage

Sharing

General

Target

fea424a9f39d25ee28f3051934f340f07fc57d141e6343a06bde1c051e87679b
Size

94KB
Sample

240912-d6lvqszang
MD5

bcba9be346fe1e7f148669c2350670fe
SHA1

920e12a2f371f0c5e3d3ff24d5e800b07199de87
SHA256

fea424a9f39d25ee28f3051934f340f07fc57d141e6343a06bde1c051e87679b
SHA512

c2eb268842ee533f889eb1f2819df2aa7b5ac0725fc7fee6af8eda98763e106002946b900967bd7d3f9241d990a2b6d17f372190f384f863d04ff01f040e878a
SSDEEP

1536:UAmbI8QZHxIjbfNO5W7rThvzf2LWS5DUHRbPa9b6i+sImo71+jqx:Iw8+WPlrkWS5DSCopsIm81+jqx

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fea424a9f39d25ee28f3051934f340f07fc57d141e6343a06bde1c051e87679b
- Size
  
  94KB
- MD5
  
  bcba9be346fe1e7f148669c2350670fe
- SHA1
  
  920e12a2f371f0c5e3d3ff24d5e800b07199de87
- SHA256
  
  fea424a9f39d25ee28f3051934f340f07fc57d141e6343a06bde1c051e87679b
- SHA512
  
  c2eb268842ee533f889eb1f2819df2aa7b5ac0725fc7fee6af8eda98763e106002946b900967bd7d3f9241d990a2b6d17f372190f384f863d04ff01f040e878a
- SSDEEP
  
  1536:UAmbI8QZHxIjbfNO5W7rThvzf2LWS5DUHRbPa9b6i+sImo71+jqx:Iw8+WPlrkWS5DSCopsIm81+jqx
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence