f5043e2da10af72cb33cebfa14a2ae5178f54fa3e3a64f5d448c03975f2cd30b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5043e2da10af72cb33cebfa14a2ae5178f54fa3e3a64f5d448c03975f2cd30b
Size

860KB
Sample

240912-drrgnsycqm
MD5

6d16a5fc9d222a59921081ef7dac5a1c
SHA1

9be56946440806fd10d89671657115e9dd138224
SHA256

f5043e2da10af72cb33cebfa14a2ae5178f54fa3e3a64f5d448c03975f2cd30b
SHA512

9cf1c72d2b4a7a5078e6faeb1f9b821befa1e9445e617410ea80dff96fa2c7ed3f7a93c017f86777661ca7dedb723d66b59aebf1903a40d7c00f57420b3a332a
SSDEEP

24576:eh5hPuh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YS:JbazR0vD

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f5043e2da10af72cb33cebfa14a2ae5178f54fa3e3a64f5d448c03975f2cd30b
- Size
  
  860KB
- MD5
  
  6d16a5fc9d222a59921081ef7dac5a1c
- SHA1
  
  9be56946440806fd10d89671657115e9dd138224
- SHA256
  
  f5043e2da10af72cb33cebfa14a2ae5178f54fa3e3a64f5d448c03975f2cd30b
- SHA512
  
  9cf1c72d2b4a7a5078e6faeb1f9b821befa1e9445e617410ea80dff96fa2c7ed3f7a93c017f86777661ca7dedb723d66b59aebf1903a40d7c00f57420b3a332a
- SSDEEP
  
  24576:eh5hPuh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YS:JbazR0vD
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence