c766c4ebe4a5d36e174a382158f5fa58717019b7b405ef266675ac9e5df12f9d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c766c4ebe4a5d36e174a382158f5fa58717019b7b405ef266675ac9e5df12f9d
Size

64KB
Sample

240914-bvfhgazhpf
MD5

54ecfd04076272a2b211f8ba8c472161
SHA1

286407679916cee902aa44e515b61b2dc41bd819
SHA256

c766c4ebe4a5d36e174a382158f5fa58717019b7b405ef266675ac9e5df12f9d
SHA512

3af547d951cfdccef2f4f355bf738e859dd295aa4464141e79c05b7d641424a22f97c587a60e50f7e90a808d23c2f5c0eb2aa3b8e2c6a8e01ce138fc45d94b72
SSDEEP

1536:CaLGLzGvTUB2zS2VXC7w2FT9bHlGHVSGB6pjZuYDPf:HLGHGvq2zSQKw2ptlaSo6pjZuY7f

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c766c4ebe4a5d36e174a382158f5fa58717019b7b405ef266675ac9e5df12f9d
- Size
  
  64KB
- MD5
  
  54ecfd04076272a2b211f8ba8c472161
- SHA1
  
  286407679916cee902aa44e515b61b2dc41bd819
- SHA256
  
  c766c4ebe4a5d36e174a382158f5fa58717019b7b405ef266675ac9e5df12f9d
- SHA512
  
  3af547d951cfdccef2f4f355bf738e859dd295aa4464141e79c05b7d641424a22f97c587a60e50f7e90a808d23c2f5c0eb2aa3b8e2c6a8e01ce138fc45d94b72
- SSDEEP
  
  1536:CaLGLzGvTUB2zS2VXC7w2FT9bHlGHVSGB6pjZuYDPf:HLGHGvq2zSQKw2ptlaSo6pjZuY7f
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence