3d16b3844618893d050e929ed250ddb3ffc6e098be8f1b7d89853a89d281ea73 | Triage

Sharing

General

Target

3d16b3844618893d050e929ed250ddb3ffc6e098be8f1b7d89853a89d281ea73
Size

64KB
Sample

240913-zhj7wsxgjj
MD5

1184a726a41d8c633cf0bbc0c509a3e4
SHA1

d8d5f2a372a55d6906a2cdf40efd01cc147f51f2
SHA256

3d16b3844618893d050e929ed250ddb3ffc6e098be8f1b7d89853a89d281ea73
SHA512

859d8446a4cbdc04b38d26d9cfa747e3298be632fc81f615733bed1695dcaa3ad71438b0512a784466c94727f7c6dab8b22ba2840926fe0c69736f613d2d4c20
SSDEEP

1536:ZVKmt/v7ntztknIjC+qunqlWzUyXUwXfzwv:ZVKM7snIDnFxPzwv

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3d16b3844618893d050e929ed250ddb3ffc6e098be8f1b7d89853a89d281ea73
- Size
  
  64KB
- MD5
  
  1184a726a41d8c633cf0bbc0c509a3e4
- SHA1
  
  d8d5f2a372a55d6906a2cdf40efd01cc147f51f2
- SHA256
  
  3d16b3844618893d050e929ed250ddb3ffc6e098be8f1b7d89853a89d281ea73
- SHA512
  
  859d8446a4cbdc04b38d26d9cfa747e3298be632fc81f615733bed1695dcaa3ad71438b0512a784466c94727f7c6dab8b22ba2840926fe0c69736f613d2d4c20
- SSDEEP
  
  1536:ZVKmt/v7ntztknIjC+qunqlWzUyXUwXfzwv:ZVKM7snIDnFxPzwv
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence