c2ee788d1916db0dbe6e1f823d46f9547007d6a7ceb88c8805edae0cb2848783 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64e128ff7a26ed159120e704367dd0a0N
Size

80KB
Sample

240913-bb81nsvfql
MD5

64e128ff7a26ed159120e704367dd0a0
SHA1

2b10a9372eb383a1efd9de4e62ba412108d2f87c
SHA256

c2ee788d1916db0dbe6e1f823d46f9547007d6a7ceb88c8805edae0cb2848783
SHA512

4624381a97728f3c441ff6ceecbca428f7fedb5f34d5a8953841da8e2756e6afbfd3a47c731c90a501c4cffed42fa5738d580e274e9359f5909797fdc42ea598
SSDEEP

1536:ELV8VBje0jor25mMEiNzCxcG9Ci88jiI2LtJ9VqDlzVxyh+CbxMa:ELVIe0crCEGdojUtJ9IDlRxyhTb7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  64e128ff7a26ed159120e704367dd0a0N
- Size
  
  80KB
- MD5
  
  64e128ff7a26ed159120e704367dd0a0
- SHA1
  
  2b10a9372eb383a1efd9de4e62ba412108d2f87c
- SHA256
  
  c2ee788d1916db0dbe6e1f823d46f9547007d6a7ceb88c8805edae0cb2848783
- SHA512
  
  4624381a97728f3c441ff6ceecbca428f7fedb5f34d5a8953841da8e2756e6afbfd3a47c731c90a501c4cffed42fa5738d580e274e9359f5909797fdc42ea598
- SSDEEP
  
  1536:ELV8VBje0jor25mMEiNzCxcG9Ci88jiI2LtJ9VqDlzVxyh+CbxMa:ELVIe0crCEGdojUtJ9IDlRxyhTb7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence