61ebc40be3812322af4d703ebc058e8d2a35c6a9893debb21121bf817e63c01a | Triage

Sharing

General

Target

61ebc40be3812322af4d703ebc058e8d2a35c6a9893debb21121bf817e63c01a
Size

72KB
Sample

240914-1q4f6syelf
MD5

8f0fdbf4abc95bef0e9b7c9cb29708d9
SHA1

e8cef81eaba6ed4a03c9828a119685c3bfb3b5a9
SHA256

61ebc40be3812322af4d703ebc058e8d2a35c6a9893debb21121bf817e63c01a
SHA512

309d63c84a3101cf31aac009b086417e1e2d44ddefdfe66e54559df8cfa4e308c6ed864e4cec0554349772dd760d03e5fa7925be0908e452f9d2ed1aa078d707
SSDEEP

1536:n2mU3E5pLRgedDPj23oiaqtkLJPWZ0RQJDbEyRCRRRoR4Rk4:rU3ehH723o8tAJPWZ0e1Ey032ya4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  61ebc40be3812322af4d703ebc058e8d2a35c6a9893debb21121bf817e63c01a
- Size
  
  72KB
- MD5
  
  8f0fdbf4abc95bef0e9b7c9cb29708d9
- SHA1
  
  e8cef81eaba6ed4a03c9828a119685c3bfb3b5a9
- SHA256
  
  61ebc40be3812322af4d703ebc058e8d2a35c6a9893debb21121bf817e63c01a
- SHA512
  
  309d63c84a3101cf31aac009b086417e1e2d44ddefdfe66e54559df8cfa4e308c6ed864e4cec0554349772dd760d03e5fa7925be0908e452f9d2ed1aa078d707
- SSDEEP
  
  1536:n2mU3E5pLRgedDPj23oiaqtkLJPWZ0RQJDbEyRCRRRoR4Rk4:rU3ehH723o8tAJPWZ0e1Ey032ya4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence