6c90e55a92a3d0bf1b03f26f9232ab517ba7ab8e9585d2ffce7c9898456e37c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6c90e55a92a3d0bf1b03f26f9232ab517ba7ab8e9585d2ffce7c9898456e37c2N
Size

93KB
Sample

240918-1agmgatfna
MD5

121b5817d1aa522bc7def2007fdec9c0
SHA1

62381bab6541721cdf880a0f2cf4649b6a3678b8
SHA256

6c90e55a92a3d0bf1b03f26f9232ab517ba7ab8e9585d2ffce7c9898456e37c2
SHA512

e83074d1ab7df65bbef0e3fe68dae549f32b428a399ab2b1c8c79ad242c4165a9887a68cf29f1dd3216310ab5b47df8ec35ccca2903427c3e96ef8bcc44e42f0
SSDEEP

1536:JzyVb1T0ihe8dQb9TFb7nzCnUNzuX4sRQKARkRLJzeLD9N0iQGRNQR8RyV+32r:lyvT0ihIFb79QXHe5SJdEN0s4WE+3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6c90e55a92a3d0bf1b03f26f9232ab517ba7ab8e9585d2ffce7c9898456e37c2N
- Size
  
  93KB
- MD5
  
  121b5817d1aa522bc7def2007fdec9c0
- SHA1
  
  62381bab6541721cdf880a0f2cf4649b6a3678b8
- SHA256
  
  6c90e55a92a3d0bf1b03f26f9232ab517ba7ab8e9585d2ffce7c9898456e37c2
- SHA512
  
  e83074d1ab7df65bbef0e3fe68dae549f32b428a399ab2b1c8c79ad242c4165a9887a68cf29f1dd3216310ab5b47df8ec35ccca2903427c3e96ef8bcc44e42f0
- SSDEEP
  
  1536:JzyVb1T0ihe8dQb9TFb7nzCnUNzuX4sRQKARkRLJzeLD9N0iQGRNQR8RyV+32r:lyvT0ihIFb79QXHe5SJdEN0s4WE+3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence