957eeb9a804c3c20e070f680efda973bb52f2125412d427417127450c7c97c14 | Triage

Sharing

General

Target

957eeb9a804c3c20e070f680efda973bb52f2125412d427417127450c7c97c14
Size

79KB
Sample

240914-3xlaaathre
MD5

2b352af1c4e2463a929bd941f394f5a7
SHA1

a3f26ef45db22b8fe25d1307fc1ef7820f2dd95e
SHA256

957eeb9a804c3c20e070f680efda973bb52f2125412d427417127450c7c97c14
SHA512

1e94ae39b0e4ea55606b135ee42bb17949fbd58ef0aca65b4437cca352cd6af9a14c8cf4d08ae804b9add1e7469c8f7903f0f54b5d686c18fd6d814582a36648
SSDEEP

1536:xeoDyW+Mam4JEIUE8KiFkSIgiItKq9v6DK:4oDyWomrIUEnixtBtKq9vV

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  957eeb9a804c3c20e070f680efda973bb52f2125412d427417127450c7c97c14
- Size
  
  79KB
- MD5
  
  2b352af1c4e2463a929bd941f394f5a7
- SHA1
  
  a3f26ef45db22b8fe25d1307fc1ef7820f2dd95e
- SHA256
  
  957eeb9a804c3c20e070f680efda973bb52f2125412d427417127450c7c97c14
- SHA512
  
  1e94ae39b0e4ea55606b135ee42bb17949fbd58ef0aca65b4437cca352cd6af9a14c8cf4d08ae804b9add1e7469c8f7903f0f54b5d686c18fd6d814582a36648
- SSDEEP
  
  1536:xeoDyW+Mam4JEIUE8KiFkSIgiItKq9v6DK:4oDyWomrIUEnixtBtKq9vV
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence