094e1a81128bfd9118efb1a246f47eaee95bc26ca76498f7833cf9e6b2753fad | Triage

Sharing

General

Target

094e1a81128bfd9118efb1a246f47eaee95bc26ca76498f7833cf9e6b2753fad
Size

96KB
Sample

240912-w9j5esyajn
MD5

61e25f82e643daed34cae9e0f338ff2f
SHA1

5a7054af34e846b4ccd9096ea596ea9c9f5d5846
SHA256

094e1a81128bfd9118efb1a246f47eaee95bc26ca76498f7833cf9e6b2753fad
SHA512

8a23f33153d86355aaaeafdd19177dcb4e857031beddf375d63fcb9a933f364f838ab32de17762c10a1686ed5911d75a79a35373231afcecc0ac607d5711dcb7
SSDEEP

1536:XWJEL4VbmGD/kFS/isSJpDZ3fKR1DvcS/fw+t0RQ+WR5R45WtqV9R2R462izMg3W:1M6GD/5/isSJpDZ3fKfvcS/fwI0e+WHu

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  094e1a81128bfd9118efb1a246f47eaee95bc26ca76498f7833cf9e6b2753fad
- Size
  
  96KB
- MD5
  
  61e25f82e643daed34cae9e0f338ff2f
- SHA1
  
  5a7054af34e846b4ccd9096ea596ea9c9f5d5846
- SHA256
  
  094e1a81128bfd9118efb1a246f47eaee95bc26ca76498f7833cf9e6b2753fad
- SHA512
  
  8a23f33153d86355aaaeafdd19177dcb4e857031beddf375d63fcb9a933f364f838ab32de17762c10a1686ed5911d75a79a35373231afcecc0ac607d5711dcb7
- SSDEEP
  
  1536:XWJEL4VbmGD/kFS/isSJpDZ3fKR1DvcS/fw+t0RQ+WR5R45WtqV9R2R462izMg3W:1M6GD/5/isSJpDZ3fKfvcS/fwI0e+WHu
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence