6420c266168df464e00608c846a17c14383e0cdd4e534f4a78a1ce04f65cfb12 | Triage

Sharing

General

Target

6420c266168df464e00608c846a17c14383e0cdd4e534f4a78a1ce04f65cfb12
Size

96KB
Sample

240914-1trxjsyejm
MD5

5275450245475497eef4f0263db5c696
SHA1

c73fcaf5e98b63a03534e1e3c47eab4c9f622835
SHA256

6420c266168df464e00608c846a17c14383e0cdd4e534f4a78a1ce04f65cfb12
SHA512

053259e671a604906d14eaf1aed7d3500ad8d024faff5c5e7b37e581a93187fe9644ca9f55910961d9531ad6bdf50bc95db31476f746d2e550ee2278442766a2
SSDEEP

1536:f0pNTNUKqNX/eaSMwPa6Z52LP7RZObZUUWaegPYA:f0bNUKqN7SzP5yPClUUWae

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6420c266168df464e00608c846a17c14383e0cdd4e534f4a78a1ce04f65cfb12
- Size
  
  96KB
- MD5
  
  5275450245475497eef4f0263db5c696
- SHA1
  
  c73fcaf5e98b63a03534e1e3c47eab4c9f622835
- SHA256
  
  6420c266168df464e00608c846a17c14383e0cdd4e534f4a78a1ce04f65cfb12
- SHA512
  
  053259e671a604906d14eaf1aed7d3500ad8d024faff5c5e7b37e581a93187fe9644ca9f55910961d9531ad6bdf50bc95db31476f746d2e550ee2278442766a2
- SSDEEP
  
  1536:f0pNTNUKqNX/eaSMwPa6Z52LP7RZObZUUWaegPYA:f0bNUKqN7SzP5yPClUUWae
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence