e6802589abaf5c50dc6626e16f8d0b9db2fdec345be074e6604e28b1d40e3197 | Triage

Sharing

General

Target

e6802589abaf5c50dc6626e16f8d0b9db2fdec345be074e6604e28b1d40e3197
Size

80KB
Sample

240915-cx9prs1dqq
MD5

7e4e85f0a06c94f8397a2028dd642a3a
SHA1

00d8a2f70aefcd131adbe9c983b7439372be49f4
SHA256

e6802589abaf5c50dc6626e16f8d0b9db2fdec345be074e6604e28b1d40e3197
SHA512

5f953ebedc2ad6c42b439c22d06ef4b23dcb36f696b6d32415560b373ef744885ada1745e4ca09743db88cb4a76f8a705256adaeae7e349ad34c433ffc2b7ad0
SSDEEP

1536:h+WO9YKYT7oAfgzrF7ShkVKPAasbjxMP2LdJ9VqDlzVxyh+CbxMa:aY+rFOdPAas/xXdJ9IDlRxyhTb7

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e6802589abaf5c50dc6626e16f8d0b9db2fdec345be074e6604e28b1d40e3197
- Size
  
  80KB
- MD5
  
  7e4e85f0a06c94f8397a2028dd642a3a
- SHA1
  
  00d8a2f70aefcd131adbe9c983b7439372be49f4
- SHA256
  
  e6802589abaf5c50dc6626e16f8d0b9db2fdec345be074e6604e28b1d40e3197
- SHA512
  
  5f953ebedc2ad6c42b439c22d06ef4b23dcb36f696b6d32415560b373ef744885ada1745e4ca09743db88cb4a76f8a705256adaeae7e349ad34c433ffc2b7ad0
- SSDEEP
  
  1536:h+WO9YKYT7oAfgzrF7ShkVKPAasbjxMP2LdJ9VqDlzVxyh+CbxMa:aY+rFOdPAas/xXdJ9IDlRxyhTb7
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence