7fa607c68aa4a5b6654e547724199f10e168687c5d5a3421654c5fc5371f8243 | Triage

Sharing

General

Target

7fa607c68aa4a5b6654e547724199f10e168687c5d5a3421654c5fc5371f8243
Size

80KB
Sample

240913-3exklavhnh
MD5

496134c35366fb5cc5b5755abae4708f
SHA1

35ee814722aea9e96255db117e526b4d7674f5c3
SHA256

7fa607c68aa4a5b6654e547724199f10e168687c5d5a3421654c5fc5371f8243
SHA512

f91ca5e5ea57677a2aeb5cc1d3a7e7c1970d6bd97154738a33f69090fbd62069d2e65934e5308dcfd68591dd16dbe98b915beed87a10786a51587fcc553dbb60
SSDEEP

1536:4hG1xNZjMjHn7+V/FE13eilFN9Bku2LKJ9VqDlzVxyh+CbxMa:oG1xNibya131kzKJ9IDlRxyhTb7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7fa607c68aa4a5b6654e547724199f10e168687c5d5a3421654c5fc5371f8243
- Size
  
  80KB
- MD5
  
  496134c35366fb5cc5b5755abae4708f
- SHA1
  
  35ee814722aea9e96255db117e526b4d7674f5c3
- SHA256
  
  7fa607c68aa4a5b6654e547724199f10e168687c5d5a3421654c5fc5371f8243
- SHA512
  
  f91ca5e5ea57677a2aeb5cc1d3a7e7c1970d6bd97154738a33f69090fbd62069d2e65934e5308dcfd68591dd16dbe98b915beed87a10786a51587fcc553dbb60
- SSDEEP
  
  1536:4hG1xNZjMjHn7+V/FE13eilFN9Bku2LKJ9VqDlzVxyh+CbxMa:oG1xNibya131kzKJ9IDlRxyhTb7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence