fa6e1d1cbc0bcf192b23a508d28032002ff79f600e970aec792c63e5bbcfd160 | Triage

Sharing

General

Target

cb14841d9169830f1cce125bab777a50N
Size

219KB
Sample

240914-lskdraxfpj
MD5

cb14841d9169830f1cce125bab777a50
SHA1

eeb824b9ab2e6cfb1f3cb2ed3f730f3bf43cab54
SHA256

fa6e1d1cbc0bcf192b23a508d28032002ff79f600e970aec792c63e5bbcfd160
SHA512

d7e9b68939d9609856893588b9dbbfa1f5a3bd28df138b249c4b47245fcfe8a98cabfab06f0f820c58ebb55b509162ed73ce007abce0c77e7085379d1bd8d3fd
SSDEEP

3072:op6rl5yWWWPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:okmUzDOO0aDD4PCxdXXwSfYrwB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  cb14841d9169830f1cce125bab777a50N
- Size
  
  219KB
- MD5
  
  cb14841d9169830f1cce125bab777a50
- SHA1
  
  eeb824b9ab2e6cfb1f3cb2ed3f730f3bf43cab54
- SHA256
  
  fa6e1d1cbc0bcf192b23a508d28032002ff79f600e970aec792c63e5bbcfd160
- SHA512
  
  d7e9b68939d9609856893588b9dbbfa1f5a3bd28df138b249c4b47245fcfe8a98cabfab06f0f820c58ebb55b509162ed73ce007abce0c77e7085379d1bd8d3fd
- SSDEEP
  
  3072:op6rl5yWWWPzwuZkO0aDb/IBPCOQvU6z314EXrjvwSfYrwBt:okmUzDOO0aDD4PCxdXXwSfYrwB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence