e9f2f0580374291e6ae3881d6678b6bed34ba021c7e588b0a6bb9acb5e701f71 | Triage

Sharing

General

Target

43baafce6330c896774eaaa4f805ca90N
Size

89KB
Sample

240912-h2c49axfkc
MD5

43baafce6330c896774eaaa4f805ca90
SHA1

bbe5a8c05657f54318e46d262e7f937f8610d862
SHA256

e9f2f0580374291e6ae3881d6678b6bed34ba021c7e588b0a6bb9acb5e701f71
SHA512

7d36ad2dac887c3ed76307d1a0daa0e7a2a4d201ee0035b3c77e5bf1db6a106821c16ff5db415f4fcd52a60e2988cc1a915972dd952b136a8cfcf8f4c69a651f
SSDEEP

1536:K9Wz2hV9qzGUENvNcL7UR+Q2r0YvJA8RQpD68a+VMKKTRVGFtUhQfR1WRaROR8R:KGc2JH7nQ20Yvi8e4r4MKy3G7UEqMM6

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  43baafce6330c896774eaaa4f805ca90N
- Size
  
  89KB
- MD5
  
  43baafce6330c896774eaaa4f805ca90
- SHA1
  
  bbe5a8c05657f54318e46d262e7f937f8610d862
- SHA256
  
  e9f2f0580374291e6ae3881d6678b6bed34ba021c7e588b0a6bb9acb5e701f71
- SHA512
  
  7d36ad2dac887c3ed76307d1a0daa0e7a2a4d201ee0035b3c77e5bf1db6a106821c16ff5db415f4fcd52a60e2988cc1a915972dd952b136a8cfcf8f4c69a651f
- SSDEEP
  
  1536:K9Wz2hV9qzGUENvNcL7UR+Q2r0YvJA8RQpD68a+VMKKTRVGFtUhQfR1WRaROR8R:KGc2JH7nQ20Yvi8e4r4MKy3G7UEqMM6
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence