2a87388b4e60adfa2a8e7a8d0a8ed456865b855e124a299d97effccb21e54821 | Triage

Sharing

General

Target

2a87388b4e60adfa2a8e7a8d0a8ed456865b855e124a299d97effccb21e54821
Size

78KB
Sample

240913-ytewwawfra
MD5

00fec1acc9de769897c0f775ad55cb7d
SHA1

2586fb1f6399572b81b481d09770206696c59720
SHA256

2a87388b4e60adfa2a8e7a8d0a8ed456865b855e124a299d97effccb21e54821
SHA512

adafe6c533ee23229e891230a1134af01388b48ac06e756e124a5afa057d30b3282040a6f7079c95cc4a4d76be4eacb316a39d7bd7fbc6ce544fec62313073a7
SSDEEP

768:989sGC9Qkb7D/HPVVIWpU22chK3u0P7/yApUww9mgp8/1H5zQXdnhgH1Ks6gsZsp:98DC9JVF90P7ac7wszxikIggsJVHcbns

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  2a87388b4e60adfa2a8e7a8d0a8ed456865b855e124a299d97effccb21e54821
- Size
  
  78KB
- MD5
  
  00fec1acc9de769897c0f775ad55cb7d
- SHA1
  
  2586fb1f6399572b81b481d09770206696c59720
- SHA256
  
  2a87388b4e60adfa2a8e7a8d0a8ed456865b855e124a299d97effccb21e54821
- SHA512
  
  adafe6c533ee23229e891230a1134af01388b48ac06e756e124a5afa057d30b3282040a6f7079c95cc4a4d76be4eacb316a39d7bd7fbc6ce544fec62313073a7
- SSDEEP
  
  768:989sGC9Qkb7D/HPVVIWpU22chK3u0P7/yApUww9mgp8/1H5zQXdnhgH1Ks6gsZsp:98DC9JVF90P7ac7wszxikIggsJVHcbns
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence