27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03 | Triage

Sharing

General

Target

27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03
Size

75KB
Sample

240912-zene5stenf
MD5

0bd6cd40f5b0c6127875182fca3d5dae
SHA1

0a6d59deb4151a8a8e3f74e9118149f900964e74
SHA256

27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03
SHA512

2f9ae27af54d47cd95dae56d3d35f585e6a96d0ef46b85e4fc287d6265cf417e4aaaca8e80e1a9f2ce9bcf68766139803b9a18551a21e5d22f75f3433bf96058
SSDEEP

1536:nzrWH4Vv1GTQReuqjeL+FmqnnsStXdq8JFYMtO53q52IrFH:vWHGv1nRNGn9qgFttg3qv

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03
- Size
  
  75KB
- MD5
  
  0bd6cd40f5b0c6127875182fca3d5dae
- SHA1
  
  0a6d59deb4151a8a8e3f74e9118149f900964e74
- SHA256
  
  27dcf9852c0ce5f009d95f01dfe56051bd8d79c3dc3a5b8dad047b973dcd2c03
- SHA512
  
  2f9ae27af54d47cd95dae56d3d35f585e6a96d0ef46b85e4fc287d6265cf417e4aaaca8e80e1a9f2ce9bcf68766139803b9a18551a21e5d22f75f3433bf96058
- SSDEEP
  
  1536:nzrWH4Vv1GTQReuqjeL+FmqnnsStXdq8JFYMtO53q52IrFH:vWHGv1nRNGn9qgFttg3qv
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence