f03ea7917b3d7fffb7abf1fe063ec40428204d87890114cb339c02ad6054e03b | Triage

Sharing

General

Target

f03ea7917b3d7fffb7abf1fe063ec40428204d87890114cb339c02ad6054e03b
Size

59KB
Sample

240915-nqmr7ssern
MD5

560ec2151e5c1478f6d51a9d3a0e6d36
SHA1

cee11cc6b1a3180acecc1bd9ddcece301a55f39f
SHA256

f03ea7917b3d7fffb7abf1fe063ec40428204d87890114cb339c02ad6054e03b
SHA512

e8837cc6b8218ed92d4881ff95516e17e52a1a6b18221fcbfeb8163002e576fd73f8c523c8dbeb02ad9a8df1ecb321307404051d86a00a9d094f267b5fda00f9
SSDEEP

768:U3cj5AdMlyOH3FmTAi4LVC3gsitWHWLXzS6ILqJUXlGZ/1H5y5nf1fZMEBFELvkH:LitOSAiAshuHXzSCJUXaMNCyVso

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f03ea7917b3d7fffb7abf1fe063ec40428204d87890114cb339c02ad6054e03b
- Size
  
  59KB
- MD5
  
  560ec2151e5c1478f6d51a9d3a0e6d36
- SHA1
  
  cee11cc6b1a3180acecc1bd9ddcece301a55f39f
- SHA256
  
  f03ea7917b3d7fffb7abf1fe063ec40428204d87890114cb339c02ad6054e03b
- SHA512
  
  e8837cc6b8218ed92d4881ff95516e17e52a1a6b18221fcbfeb8163002e576fd73f8c523c8dbeb02ad9a8df1ecb321307404051d86a00a9d094f267b5fda00f9
- SSDEEP
  
  768:U3cj5AdMlyOH3FmTAi4LVC3gsitWHWLXzS6ILqJUXlGZ/1H5y5nf1fZMEBFELvkH:LitOSAiAshuHXzSCJUXaMNCyVso
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence