43f96c2d48f1a17a5cd6e98fd3ad329a04ae80b00a399c149c90d67675da9941 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43f96c2d48f1a17a5cd6e98fd3ad329a04ae80b00a399c149c90d67675da9941
Size

92KB
Sample

240913-ztfc3syhne
MD5

0d21aff9758c9f42b20b6b6a8932e359
SHA1

104b3d0ac0a318b5fd9cc11840f446bfbf0ee7e5
SHA256

43f96c2d48f1a17a5cd6e98fd3ad329a04ae80b00a399c149c90d67675da9941
SHA512

dc62040ee8bc75781c15847cdd46a43ecee452048d79d0c0de82869fc277bca20d5ac3ca8f2df72f0621dcd9d6e442c01ab46d8bb9dbd25e4ee80128a0585be2
SSDEEP

1536:kBgy1laBc9jq0oVevZW6NX3gQ7cJhaFw3HV8Oa2nKQrUoR24HsUs:k/aMLzNn63qv6THsR

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  43f96c2d48f1a17a5cd6e98fd3ad329a04ae80b00a399c149c90d67675da9941
- Size
  
  92KB
- MD5
  
  0d21aff9758c9f42b20b6b6a8932e359
- SHA1
  
  104b3d0ac0a318b5fd9cc11840f446bfbf0ee7e5
- SHA256
  
  43f96c2d48f1a17a5cd6e98fd3ad329a04ae80b00a399c149c90d67675da9941
- SHA512
  
  dc62040ee8bc75781c15847cdd46a43ecee452048d79d0c0de82869fc277bca20d5ac3ca8f2df72f0621dcd9d6e442c01ab46d8bb9dbd25e4ee80128a0585be2
- SSDEEP
  
  1536:kBgy1laBc9jq0oVevZW6NX3gQ7cJhaFw3HV8Oa2nKQrUoR24HsUs:k/aMLzNn63qv6THsR
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence