8568ecc76f27bf6641f64934650160b7607fe0b2a2a52f00639220bad1952b43 | Triage

Sharing

General

Target

8568ecc76f27bf6641f64934650160b7607fe0b2a2a52f00639220bad1952b43
Size

80KB
Sample

240913-3lt32svgjl
MD5

7540a8b3764a42746238c6428eb743ae
SHA1

f4a23fe54f10ab53e813581ffc6b237b8852d98f
SHA256

8568ecc76f27bf6641f64934650160b7607fe0b2a2a52f00639220bad1952b43
SHA512

bddbb3e93ce421622a625f8adf46cefcb6344e609c3b01600820541c4c1d36ba3ef68d23cfbc26e7b1e304187d0871c32ce2617ab048b3afeaa967c881202f49
SSDEEP

1536:HkU89J/5Er2hLUXbKy7tIos5bPBmlduN52LNlJ9VqDlzVxyh+CbxMa:F89J/5P/0O4lduNyHJ9IDlRxyhTb7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8568ecc76f27bf6641f64934650160b7607fe0b2a2a52f00639220bad1952b43
- Size
  
  80KB
- MD5
  
  7540a8b3764a42746238c6428eb743ae
- SHA1
  
  f4a23fe54f10ab53e813581ffc6b237b8852d98f
- SHA256
  
  8568ecc76f27bf6641f64934650160b7607fe0b2a2a52f00639220bad1952b43
- SHA512
  
  bddbb3e93ce421622a625f8adf46cefcb6344e609c3b01600820541c4c1d36ba3ef68d23cfbc26e7b1e304187d0871c32ce2617ab048b3afeaa967c881202f49
- SSDEEP
  
  1536:HkU89J/5Er2hLUXbKy7tIos5bPBmlduN52LNlJ9VqDlzVxyh+CbxMa:F89J/5P/0O4lduNyHJ9IDlRxyhTb7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence