9fb9924edc282d684a6843de2411d05b4001260d060571af366ff6767c9317a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46e84989ee7b2f96875e175383943aa0N
Size

302KB
Sample

240912-f9prxatdmd
MD5

46e84989ee7b2f96875e175383943aa0
SHA1

86947a38c246203acfda636d5cbca94114fb5abb
SHA256

9fb9924edc282d684a6843de2411d05b4001260d060571af366ff6767c9317a4
SHA512

7d7a5c1e95d03b37989e8def57e84ff8638b9afd5d44b11372d1a94ff88c2a52b871c6a4354e2b23bcfbb9fd73ee11214e52ce6790dcaeb081733c982b331474
SSDEEP

6144:FgvtpiLqEcTtgSbnd3FF7fPtcsw6UJZqktbOUqCTGepXgbWH:Fgvcqnv53FF7fFcsw6UJZqktbDqCTGeV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  46e84989ee7b2f96875e175383943aa0N
- Size
  
  302KB
- MD5
  
  46e84989ee7b2f96875e175383943aa0
- SHA1
  
  86947a38c246203acfda636d5cbca94114fb5abb
- SHA256
  
  9fb9924edc282d684a6843de2411d05b4001260d060571af366ff6767c9317a4
- SHA512
  
  7d7a5c1e95d03b37989e8def57e84ff8638b9afd5d44b11372d1a94ff88c2a52b871c6a4354e2b23bcfbb9fd73ee11214e52ce6790dcaeb081733c982b331474
- SSDEEP
  
  6144:FgvtpiLqEcTtgSbnd3FF7fPtcsw6UJZqktbOUqCTGepXgbWH:Fgvcqnv53FF7fFcsw6UJZqktbDqCTGeV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence