2d2b46f3b568f8f09a2a5831a7c61afc49330bffac6bdbe2b7ec443d8ebac7c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0ed46e95ee6a82470404298bd4218b0N
Size

99KB
Sample

240914-h97c3asdnl
MD5

d0ed46e95ee6a82470404298bd4218b0
SHA1

1dae50d15672585825edefd70aa6492f75eb692e
SHA256

2d2b46f3b568f8f09a2a5831a7c61afc49330bffac6bdbe2b7ec443d8ebac7c3
SHA512

8a063f41ab9b6a49c82ce06c870cbaf495482a47ec32356b3d7660b1cfd5531c4edd08527172b710e83e33dc4b43b238eb800cdace4d4234e88a190df8c02802
SSDEEP

3072:pYMiswzQcwtrn3YLfneuckYTy2+y5eyYpwoTRBmDRGGurhUI:pYM8LwZ3YauckYnyWm7UI

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d0ed46e95ee6a82470404298bd4218b0N
- Size
  
  99KB
- MD5
  
  d0ed46e95ee6a82470404298bd4218b0
- SHA1
  
  1dae50d15672585825edefd70aa6492f75eb692e
- SHA256
  
  2d2b46f3b568f8f09a2a5831a7c61afc49330bffac6bdbe2b7ec443d8ebac7c3
- SHA512
  
  8a063f41ab9b6a49c82ce06c870cbaf495482a47ec32356b3d7660b1cfd5531c4edd08527172b710e83e33dc4b43b238eb800cdace4d4234e88a190df8c02802
- SSDEEP
  
  3072:pYMiswzQcwtrn3YLfneuckYTy2+y5eyYpwoTRBmDRGGurhUI:pYM8LwZ3YauckYnyWm7UI
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence