8f0b7417d35d3f0b9b7ab960a7cae9a2d0353d4c74b07c6768ad8a1ea3366c52 | Triage

Sharing

General

Target

952a9ab6cb5bc99a3b31c51f3f38d680N
Size

59KB
Sample

240914-p7a1eavcpj
MD5

952a9ab6cb5bc99a3b31c51f3f38d680
SHA1

91533f62a6acf54e96eaa6e23a1cb1308adb6bac
SHA256

8f0b7417d35d3f0b9b7ab960a7cae9a2d0353d4c74b07c6768ad8a1ea3366c52
SHA512

b0481989868c972536808589661a3681f82ea81d266b9bdbaa199cd7834ac82f788f845b5aba01025b20e834be7dd8bbb7ce57e1c70acc5bae88e52942a0d9fb
SSDEEP

768:ZlsYCtR6yUhPsnNfIGSEBMtzZb6SgNKvyX2kJxp/w8ldWJZ/1H5yC5nf1fZMEBFN:wYCtSPkVizgSgNV2kJb4rU+NCyVso

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  952a9ab6cb5bc99a3b31c51f3f38d680N
- Size
  
  59KB
- MD5
  
  952a9ab6cb5bc99a3b31c51f3f38d680
- SHA1
  
  91533f62a6acf54e96eaa6e23a1cb1308adb6bac
- SHA256
  
  8f0b7417d35d3f0b9b7ab960a7cae9a2d0353d4c74b07c6768ad8a1ea3366c52
- SHA512
  
  b0481989868c972536808589661a3681f82ea81d266b9bdbaa199cd7834ac82f788f845b5aba01025b20e834be7dd8bbb7ce57e1c70acc5bae88e52942a0d9fb
- SSDEEP
  
  768:ZlsYCtR6yUhPsnNfIGSEBMtzZb6SgNKvyX2kJxp/w8ldWJZ/1H5yC5nf1fZMEBFN:wYCtSPkVizgSgNV2kJb4rU+NCyVso
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence