c33c4fd117102d3a83c5c1379e8f86b503cfbffbd74b74860f966a13b0a79a7e | Triage

Sharing

General

Target

c33c4fd117102d3a83c5c1379e8f86b503cfbffbd74b74860f966a13b0a79a7e
Size

73KB
Sample

240915-bw1j2aydkj
MD5

49222713db4ca44433dfbf53b6240a21
SHA1

64ea171c9caec84b23c75ce115fc892bb951d6a2
SHA256

c33c4fd117102d3a83c5c1379e8f86b503cfbffbd74b74860f966a13b0a79a7e
SHA512

dc416091d984462d32f74f72a4d57d81c845fc55b40d1563eedea9cc14ec7f02c111739203763688524af85c80bbad21bccae1d649ac1ce4e86aa228f6059bf0
SSDEEP

1536:cEV9r1SBHwNuNUajaoDlmgj0Mr7jHq5YMkhohBM:DjhQlzr/HWUAM

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c33c4fd117102d3a83c5c1379e8f86b503cfbffbd74b74860f966a13b0a79a7e
- Size
  
  73KB
- MD5
  
  49222713db4ca44433dfbf53b6240a21
- SHA1
  
  64ea171c9caec84b23c75ce115fc892bb951d6a2
- SHA256
  
  c33c4fd117102d3a83c5c1379e8f86b503cfbffbd74b74860f966a13b0a79a7e
- SHA512
  
  dc416091d984462d32f74f72a4d57d81c845fc55b40d1563eedea9cc14ec7f02c111739203763688524af85c80bbad21bccae1d649ac1ce4e86aa228f6059bf0
- SSDEEP
  
  1536:cEV9r1SBHwNuNUajaoDlmgj0Mr7jHq5YMkhohBM:DjhQlzr/HWUAM
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence