89397d191f3f843c786c0857bc649eb84ccca3ed3964a8dfc4895779e823b92c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89397d191f3f843c786c0857bc649eb84ccca3ed3964a8dfc4895779e823b92c
Size

94KB
Sample

240914-3cexrssgjb
MD5

74be950840368de649c99ed47287d702
SHA1

9cb858a490df64261f12d26f2791549ffaa3b997
SHA256

89397d191f3f843c786c0857bc649eb84ccca3ed3964a8dfc4895779e823b92c
SHA512

3e0f79c91d28e71e01a1b166a47287f98991ed54725520a66213e3c01dc456d35775c876e3b5c8eb2d58a0331d5002462862c2a79de5f2cf05924f0b68095ec8
SSDEEP

1536:clhpCm5flpR6I0wWZ++EmT33NiI/k03GmuEtYBqnxlRVkeyyVr3iwcH2ogHx:E2wf2/ntHk08wj3kremwc/gHx

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  89397d191f3f843c786c0857bc649eb84ccca3ed3964a8dfc4895779e823b92c
- Size
  
  94KB
- MD5
  
  74be950840368de649c99ed47287d702
- SHA1
  
  9cb858a490df64261f12d26f2791549ffaa3b997
- SHA256
  
  89397d191f3f843c786c0857bc649eb84ccca3ed3964a8dfc4895779e823b92c
- SHA512
  
  3e0f79c91d28e71e01a1b166a47287f98991ed54725520a66213e3c01dc456d35775c876e3b5c8eb2d58a0331d5002462862c2a79de5f2cf05924f0b68095ec8
- SSDEEP
  
  1536:clhpCm5flpR6I0wWZ++EmT33NiI/k03GmuEtYBqnxlRVkeyyVr3iwcH2ogHx:E2wf2/ntHk08wj3kremwc/gHx
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence