fd25e0198facb3f0d8d00d0801036772936ebde6efcb0ae3405389022caf03e3 | Triage

Sharing

General

Target

72f7b3ee5a1bf8d148fbf04b99de71f0N
Size

67KB
Sample

240915-nwt4gasbqd
MD5

72f7b3ee5a1bf8d148fbf04b99de71f0
SHA1

35a1586237a896324b9c92a81863dbf729f2d7cb
SHA256

fd25e0198facb3f0d8d00d0801036772936ebde6efcb0ae3405389022caf03e3
SHA512

16d0d3dd0a06a78bdbe617cff7bf18b4068334c3af3faff6a1ffda56125635cef91749bcac0ecdc663aa180bc157f80535abc270baaf7aeba1a0ba0d0e2eda5d
SSDEEP

1536:CaezOq7y3rK4Llzp9H4/FFL54Txa1cgCe8uC:qKA4lzp0j5exaugCe8uC

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  72f7b3ee5a1bf8d148fbf04b99de71f0N
- Size
  
  67KB
- MD5
  
  72f7b3ee5a1bf8d148fbf04b99de71f0
- SHA1
  
  35a1586237a896324b9c92a81863dbf729f2d7cb
- SHA256
  
  fd25e0198facb3f0d8d00d0801036772936ebde6efcb0ae3405389022caf03e3
- SHA512
  
  16d0d3dd0a06a78bdbe617cff7bf18b4068334c3af3faff6a1ffda56125635cef91749bcac0ecdc663aa180bc157f80535abc270baaf7aeba1a0ba0d0e2eda5d
- SSDEEP
  
  1536:CaezOq7y3rK4Llzp9H4/FFL54Txa1cgCe8uC:qKA4lzp0j5exaugCe8uC
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence