00af5fc1bcd33d2b40061a7081e29e8bd30d1f8da24b7a7fc47d4fe5c4d6bd6a | Triage

Sharing

General

Target

00af5fc1bcd33d2b40061a7081e29e8bd30d1f8da24b7a7fc47d4fe5c4d6bd6aN
Size

108KB
Sample

240919-dgys1axfqq
MD5

ad8bf1632fef292a6e2700de0761cb30
SHA1

5438783c813b737bf46168af52a7d3077bf16f53
SHA256

00af5fc1bcd33d2b40061a7081e29e8bd30d1f8da24b7a7fc47d4fe5c4d6bd6a
SHA512

a9b4fee89ce284290758f844f91d43f5a74640a1c0906c36c104b94d7a2b87a4ec0638c950cc02345b6733a428c9516e1e0f9bb88582c2bcf9843c3416a312db
SSDEEP

1536:rym27QmrB7e6EiGI/988u7NMwB+rjm8NiIqhn3HQ8BawTj2wQ3y:f6ze6ZGI/e3lUjmOiBn3w8BdTj2h3y

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  00af5fc1bcd33d2b40061a7081e29e8bd30d1f8da24b7a7fc47d4fe5c4d6bd6aN
- Size
  
  108KB
- MD5
  
  ad8bf1632fef292a6e2700de0761cb30
- SHA1
  
  5438783c813b737bf46168af52a7d3077bf16f53
- SHA256
  
  00af5fc1bcd33d2b40061a7081e29e8bd30d1f8da24b7a7fc47d4fe5c4d6bd6a
- SHA512
  
  a9b4fee89ce284290758f844f91d43f5a74640a1c0906c36c104b94d7a2b87a4ec0638c950cc02345b6733a428c9516e1e0f9bb88582c2bcf9843c3416a312db
- SSDEEP
  
  1536:rym27QmrB7e6EiGI/988u7NMwB+rjm8NiIqhn3HQ8BawTj2wQ3y:f6ze6ZGI/e3lUjmOiBn3w8BdTj2h3y
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence