fb83c181e9e36a5dfa347eee413e5e96cdfa8858e625abf14a80d6e10dc98e79 | Triage

Sharing

General

Target

fb83c181e9e36a5dfa347eee413e5e96cdfa8858e625abf14a80d6e10dc98e79
Size

56KB
Sample

240919-d9tprazbkp
MD5

685c3f7ab24eeb76cb96872d9c9255a6
SHA1

4d73673b04a55eb71b23fc757c8d6bc4318d35e9
SHA256

fb83c181e9e36a5dfa347eee413e5e96cdfa8858e625abf14a80d6e10dc98e79
SHA512

f997e97d45eb52c12e3004311ab9085a01b527bf200c90ccce7e02c4a29883051dd65b643032ad76db9a0e3ad488ed958af75d6ff2c32841f92bd02dc1a3d3f8
SSDEEP

768:lfeeH/74CCJ1sBIlVcNawI5hISg/JJ9Vt1Je/YkAETWRN/1H5bXXdnh:lfFH/74CowKVKa/OD/Jjtw/TTWRHBt

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fb83c181e9e36a5dfa347eee413e5e96cdfa8858e625abf14a80d6e10dc98e79
- Size
  
  56KB
- MD5
  
  685c3f7ab24eeb76cb96872d9c9255a6
- SHA1
  
  4d73673b04a55eb71b23fc757c8d6bc4318d35e9
- SHA256
  
  fb83c181e9e36a5dfa347eee413e5e96cdfa8858e625abf14a80d6e10dc98e79
- SHA512
  
  f997e97d45eb52c12e3004311ab9085a01b527bf200c90ccce7e02c4a29883051dd65b643032ad76db9a0e3ad488ed958af75d6ff2c32841f92bd02dc1a3d3f8
- SSDEEP
  
  768:lfeeH/74CCJ1sBIlVcNawI5hISg/JJ9Vt1Je/YkAETWRN/1H5bXXdnh:lfFH/74CowKVKa/OD/Jjtw/TTWRHBt
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence