38c7eca44b98aaf4e360d5e32ae7df06da5b42d3eca7cf288adc51d4b3c0fc91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38c7eca44b98aaf4e360d5e32ae7df06da5b42d3eca7cf288adc51d4b3c0fc91
Size

93KB
Sample

240913-zbq2vsxdlj
MD5

281c30c621a34a33515b1530d24b6729
SHA1

42900c4c8dbcb6951282c6e8a1988786d787fc31
SHA256

38c7eca44b98aaf4e360d5e32ae7df06da5b42d3eca7cf288adc51d4b3c0fc91
SHA512

ee8b2584cdb747595a435a0a098013ae11395755feb2a91ca5aecb99412bb1852d5c8feeabb9f96d000bad7174edec8d26be736cb50875119d17c67109562d98
SSDEEP

1536:oz7bB4wCkeneCjE+2E3h+X39/4e7nxjdGCgZZsRQiRkRLJzeLD9N0iQGRNQR8Ryn:y4wVeHjLCzeiSJdEN0s4WE+3K

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  38c7eca44b98aaf4e360d5e32ae7df06da5b42d3eca7cf288adc51d4b3c0fc91
- Size
  
  93KB
- MD5
  
  281c30c621a34a33515b1530d24b6729
- SHA1
  
  42900c4c8dbcb6951282c6e8a1988786d787fc31
- SHA256
  
  38c7eca44b98aaf4e360d5e32ae7df06da5b42d3eca7cf288adc51d4b3c0fc91
- SHA512
  
  ee8b2584cdb747595a435a0a098013ae11395755feb2a91ca5aecb99412bb1852d5c8feeabb9f96d000bad7174edec8d26be736cb50875119d17c67109562d98
- SSDEEP
  
  1536:oz7bB4wCkeneCjE+2E3h+X39/4e7nxjdGCgZZsRQiRkRLJzeLD9N0iQGRNQR8Ryn:y4wVeHjLCzeiSJdEN0s4WE+3K
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence