c95d7cdcb9e6813c0969c7c221e8d9a0f9371f607ce4b0311914960e9ab90826 | Triage

Sharing

General

Target

c95d7cdcb9e6813c0969c7c221e8d9a0f9371f607ce4b0311914960e9ab90826
Size

137KB
Sample

240914-bw8wea1apc
MD5

fe68744c7e11bbfd54fb15f702673398
SHA1

5d546edca09585c47b678693f7f727d5039a382e
SHA256

c95d7cdcb9e6813c0969c7c221e8d9a0f9371f607ce4b0311914960e9ab90826
SHA512

d774532f70aa79294b6d83dbe0119f597b5edbd736c80d838a64b54d5417718ae88b483e3b671759a291a9d197e2dc060fe3ba909fc8bf0d8bd02c5cfa681e96
SSDEEP

3072:gR02WMK8RJGInTlhnaBanONVk40rpg4yeF/TyUGSK9FrafcUksPxx6iTUu/:l25GgFny61mrad

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  c95d7cdcb9e6813c0969c7c221e8d9a0f9371f607ce4b0311914960e9ab90826
- Size
  
  137KB
- MD5
  
  fe68744c7e11bbfd54fb15f702673398
- SHA1
  
  5d546edca09585c47b678693f7f727d5039a382e
- SHA256
  
  c95d7cdcb9e6813c0969c7c221e8d9a0f9371f607ce4b0311914960e9ab90826
- SHA512
  
  d774532f70aa79294b6d83dbe0119f597b5edbd736c80d838a64b54d5417718ae88b483e3b671759a291a9d197e2dc060fe3ba909fc8bf0d8bd02c5cfa681e96
- SSDEEP
  
  3072:gR02WMK8RJGInTlhnaBanONVk40rpg4yeF/TyUGSK9FrafcUksPxx6iTUu/:l25GgFny61mrad
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Port Monitors
  Adversaries may use port monitors to run an adversary supplied DLL during system boot for persistence or privilege escalation.
  persistence
- Sets service image path in registry
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Port Monitors

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Port Monitors

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence