38c895fac5871e53d4862662e083baac5e051969c15e4b2df44bc8040ffb23a7 | Triage

Sharing

General

Target

38c895fac5871e53d4862662e083baac5e051969c15e4b2df44bc8040ffb23a7
Size

80KB
Sample

240913-zbt4hsxhme
MD5

4bf849344205a669d2f174e24153b04d
SHA1

8238b68198d01771ff940a0b37d796eecec1b138
SHA256

38c895fac5871e53d4862662e083baac5e051969c15e4b2df44bc8040ffb23a7
SHA512

17f2365ff88732c6f47d120ef6631bba0f02e28ac1c0c93303ccb4d09ce9881f9d68090b5152349733231ade4738d11882599ab167ce1f93d7274be56671bd37
SSDEEP

1536:14tbgYDL7P++UoiuCyn2LgvaIZTJ+7LhkiB0:EMYLCOpCTYaMU7ui

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  38c895fac5871e53d4862662e083baac5e051969c15e4b2df44bc8040ffb23a7
- Size
  
  80KB
- MD5
  
  4bf849344205a669d2f174e24153b04d
- SHA1
  
  8238b68198d01771ff940a0b37d796eecec1b138
- SHA256
  
  38c895fac5871e53d4862662e083baac5e051969c15e4b2df44bc8040ffb23a7
- SHA512
  
  17f2365ff88732c6f47d120ef6631bba0f02e28ac1c0c93303ccb4d09ce9881f9d68090b5152349733231ade4738d11882599ab167ce1f93d7274be56671bd37
- SSDEEP
  
  1536:14tbgYDL7P++UoiuCyn2LgvaIZTJ+7LhkiB0:EMYLCOpCTYaMU7ui
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence