847d50fab09a3a436518dbf58cd58ee6cab3e8172bcb3c53031794d652bdbe0f | Triage

Sharing

General

Target

847d50fab09a3a436518dbf58cd58ee6cab3e8172bcb3c53031794d652bdbe0f
Size

77KB
Sample

240914-253zmascqa
MD5

8d1c9d5481e3c328f906ced209da2a16
SHA1

54067af59855331e8dcf8bb6a805ed6b97f37b81
SHA256

847d50fab09a3a436518dbf58cd58ee6cab3e8172bcb3c53031794d652bdbe0f
SHA512

437b0c8d9e07a199e9719fd846bf8015eeeb9462130a6c8da05cda3935e0de53bc5e3d514f00b444f4548ef6fe8dfa0d0db56849cca1d53d49f72cf165693e5f
SSDEEP

1536:KVTNIeCekdS6Hz+XaTfU7jia5y2Lt4wfi+TjRC/:KRNIodWzbs7Oe/Owf1TjY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  847d50fab09a3a436518dbf58cd58ee6cab3e8172bcb3c53031794d652bdbe0f
- Size
  
  77KB
- MD5
  
  8d1c9d5481e3c328f906ced209da2a16
- SHA1
  
  54067af59855331e8dcf8bb6a805ed6b97f37b81
- SHA256
  
  847d50fab09a3a436518dbf58cd58ee6cab3e8172bcb3c53031794d652bdbe0f
- SHA512
  
  437b0c8d9e07a199e9719fd846bf8015eeeb9462130a6c8da05cda3935e0de53bc5e3d514f00b444f4548ef6fe8dfa0d0db56849cca1d53d49f72cf165693e5f
- SSDEEP
  
  1536:KVTNIeCekdS6Hz+XaTfU7jia5y2Lt4wfi+TjRC/:KRNIodWzbs7Oe/Owf1TjY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence