23a3ec5c62883d47d05c6f8cb90a39d8d8c3cad9cd037ec73492cf7dddd370c3 | Triage

Sharing

General

Target

23a3ec5c62883d47d05c6f8cb90a39d8d8c3cad9cd037ec73492cf7dddd370c3
Size

92KB
Sample

240913-yghf8svepn
MD5

0ed0ebacd0ca5fe80ec89a93fdf8f85c
SHA1

7133aaf75295b32f67b6002e7c4287cac858b5af
SHA256

23a3ec5c62883d47d05c6f8cb90a39d8d8c3cad9cd037ec73492cf7dddd370c3
SHA512

762a0928164067835ff2bdfd4387fae64ff3ccffdea27d8cbce6d1a3fff3afd114d197c6d36dbc337ec5e9de01405eab838b07dfe9a1cac79026761c6577f373
SSDEEP

1536:OJlTui8LVULa/jiDBVkvGXfMsVFBdc7ppKfMfXEVkOcnKQrUoR24HsUs:OJci8LVK4jiDgvGXfMahWppTfvW6THsR

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  23a3ec5c62883d47d05c6f8cb90a39d8d8c3cad9cd037ec73492cf7dddd370c3
- Size
  
  92KB
- MD5
  
  0ed0ebacd0ca5fe80ec89a93fdf8f85c
- SHA1
  
  7133aaf75295b32f67b6002e7c4287cac858b5af
- SHA256
  
  23a3ec5c62883d47d05c6f8cb90a39d8d8c3cad9cd037ec73492cf7dddd370c3
- SHA512
  
  762a0928164067835ff2bdfd4387fae64ff3ccffdea27d8cbce6d1a3fff3afd114d197c6d36dbc337ec5e9de01405eab838b07dfe9a1cac79026761c6577f373
- SSDEEP
  
  1536:OJlTui8LVULa/jiDBVkvGXfMsVFBdc7ppKfMfXEVkOcnKQrUoR24HsUs:OJci8LVK4jiDgvGXfMahWppTfvW6THsR
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence