7c29dd13bc0cf007b8761fc6a82ddb0ee8cbd74add4ed4186583cf6f04e41640 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f431c51b01abe89d77bd84cc3f8351f0N
Size

448KB
Sample

240913-xmasxasgkj
MD5

f431c51b01abe89d77bd84cc3f8351f0
SHA1

b83b0769235d00b7115fca7efcdcb8e182cf8e71
SHA256

7c29dd13bc0cf007b8761fc6a82ddb0ee8cbd74add4ed4186583cf6f04e41640
SHA512

fbf7f55eb72ffbd5d7650ba5d8f1b7910fa97267fb700edf8ab1f4432349dc817e1b0940b1417c1cb78a2afdcf01c9c632ba35a2abe7724a75755d0c1fe28cc1
SSDEEP

12288:2Yb2G8GyXu1jGG1ws5iETdqvZNemWrsiLk6mqgt:x2xGyXsGG1ws5ipt

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f431c51b01abe89d77bd84cc3f8351f0N
- Size
  
  448KB
- MD5
  
  f431c51b01abe89d77bd84cc3f8351f0
- SHA1
  
  b83b0769235d00b7115fca7efcdcb8e182cf8e71
- SHA256
  
  7c29dd13bc0cf007b8761fc6a82ddb0ee8cbd74add4ed4186583cf6f04e41640
- SHA512
  
  fbf7f55eb72ffbd5d7650ba5d8f1b7910fa97267fb700edf8ab1f4432349dc817e1b0940b1417c1cb78a2afdcf01c9c632ba35a2abe7724a75755d0c1fe28cc1
- SSDEEP
  
  12288:2Yb2G8GyXu1jGG1ws5iETdqvZNemWrsiLk6mqgt:x2xGyXsGG1ws5ipt
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence