f60c0d6e942fdcf03b0fa34f7a8f0047c67b14a1f685c50167795397fb3e0d8e | Triage

Sharing

General

Target

f60c0d6e942fdcf03b0fa34f7a8f0047c67b14a1f685c50167795397fb3e0d8e
Size

1.6MB
Sample

240919-d2m71aydpd
MD5

e4618d058485a17bef068a6217c268d9
SHA1

eeb6519e99c534d9a4d2f0721d7baa041ce12ef1
SHA256

f60c0d6e942fdcf03b0fa34f7a8f0047c67b14a1f685c50167795397fb3e0d8e
SHA512

e2c2b7f11a3961fb4f4fa50ff056f2b96af91ab8491500a62d1160fcced432642dcc843050d583d06d7fe4f870d3681680cabb00682108054f825133837699b9
SSDEEP

24576:FTzZgu5YyCtCCm0BmmvFimm0wh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2Y:Dgu5RCtCmi7bazR0vKLXZ+Ktz

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f60c0d6e942fdcf03b0fa34f7a8f0047c67b14a1f685c50167795397fb3e0d8e
- Size
  
  1.6MB
- MD5
  
  e4618d058485a17bef068a6217c268d9
- SHA1
  
  eeb6519e99c534d9a4d2f0721d7baa041ce12ef1
- SHA256
  
  f60c0d6e942fdcf03b0fa34f7a8f0047c67b14a1f685c50167795397fb3e0d8e
- SHA512
  
  e2c2b7f11a3961fb4f4fa50ff056f2b96af91ab8491500a62d1160fcced432642dcc843050d583d06d7fe4f870d3681680cabb00682108054f825133837699b9
- SSDEEP
  
  24576:FTzZgu5YyCtCCm0BmmvFimm0wh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2Y:Dgu5RCtCmi7bazR0vKLXZ+Ktz
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence