e6056d097c456c0b0fa8496e39bc99b8e20d2db5b9b2f9b47e671f0121d02c1e | Triage

Sharing

General

Target

e6056d097c456c0b0fa8496e39bc99b8e20d2db5b9b2f9b47e671f0121d02c1e
Size

80KB
Sample

240913-dmrxms1clm
MD5

a994ae5f8f5da057e9d4cd57f43a3d5b
SHA1

62c492b9e539ac11e9335990d2f93a897be9a6f6
SHA256

e6056d097c456c0b0fa8496e39bc99b8e20d2db5b9b2f9b47e671f0121d02c1e
SHA512

bd5003213f12fef27b64a736b570b27c2a6ecb409b25df5fdabe8244b2c4ee287eb604a5800310f7397af39f9cf80cda34d372ebbaaceeb2858bc2feccf7804d
SSDEEP

1536:dxmOtTe0IIVShG0sPGRD8tJD5o/uitVlRQAlRJJ5R2xOSC4BG:bmp0FVShro3wVe6rJ5wxO344

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e6056d097c456c0b0fa8496e39bc99b8e20d2db5b9b2f9b47e671f0121d02c1e
- Size
  
  80KB
- MD5
  
  a994ae5f8f5da057e9d4cd57f43a3d5b
- SHA1
  
  62c492b9e539ac11e9335990d2f93a897be9a6f6
- SHA256
  
  e6056d097c456c0b0fa8496e39bc99b8e20d2db5b9b2f9b47e671f0121d02c1e
- SHA512
  
  bd5003213f12fef27b64a736b570b27c2a6ecb409b25df5fdabe8244b2c4ee287eb604a5800310f7397af39f9cf80cda34d372ebbaaceeb2858bc2feccf7804d
- SSDEEP
  
  1536:dxmOtTe0IIVShG0sPGRD8tJD5o/uitVlRQAlRJJ5R2xOSC4BG:bmp0FVShro3wVe6rJ5wxO344
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence