b4e9dfbae5e00613ecc1404ec6b6fd0e80d32d376d76eb90f8d782aaed84b91c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4e9dfbae5e00613ecc1404ec6b6fd0e80d32d376d76eb90f8d782aaed84b91c
Size

93KB
Sample

240915-bcpy7axbpe
MD5

922a5a47297bb8900cff5275da8e651a
SHA1

6c601fbc62293aca1dc5eb08444732092be4d32c
SHA256

b4e9dfbae5e00613ecc1404ec6b6fd0e80d32d376d76eb90f8d782aaed84b91c
SHA512

e3244890e24878b1da5eb6038ae020237a927d013f6a6797a7bb8fcf1d7708bec1def9161c91c9bf94b82c3e3d6bbfbc926aa35cb3147fcbe2fdd807c17aa5a3
SSDEEP

1536:0ShafLnz5NfoNmnS/QI0XGq7WGVMeHHBEXFHrdniT5Njiwg58:ALnzjfcWS/QPXbHHidilFY58

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b4e9dfbae5e00613ecc1404ec6b6fd0e80d32d376d76eb90f8d782aaed84b91c
- Size
  
  93KB
- MD5
  
  922a5a47297bb8900cff5275da8e651a
- SHA1
  
  6c601fbc62293aca1dc5eb08444732092be4d32c
- SHA256
  
  b4e9dfbae5e00613ecc1404ec6b6fd0e80d32d376d76eb90f8d782aaed84b91c
- SHA512
  
  e3244890e24878b1da5eb6038ae020237a927d013f6a6797a7bb8fcf1d7708bec1def9161c91c9bf94b82c3e3d6bbfbc926aa35cb3147fcbe2fdd807c17aa5a3
- SSDEEP
  
  1536:0ShafLnz5NfoNmnS/QI0XGq7WGVMeHHBEXFHrdniT5Njiwg58:ALnzjfcWS/QPXbHHidilFY58
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence