056eaef4e69c15ab04cc8b7c12d7beffc81e603c88c885e9bb4cf00f2e4d35da | Triage

Sharing

General

Target

056eaef4e69c15ab04cc8b7c12d7beffc81e603c88c885e9bb4cf00f2e4d35daN
Size

56KB
Sample

240919-dm6qssyakn
MD5

60544765fda250a3e098ad8b3d43e670
SHA1

18001b990e3a7d9a3257fffc25186468f8a5d890
SHA256

056eaef4e69c15ab04cc8b7c12d7beffc81e603c88c885e9bb4cf00f2e4d35da
SHA512

6b684d48fb37ac782c0824f23c7a83d22fa67ae07a00fe56a9df2cd940191295027e5fca2d8fe10877328c7a3167c5243abdb27020001ab2573e2f8df463dd1a
SSDEEP

1536:lJNN+PqgBcEsTaw408To2B9HO7r+6sqW:jmncR0TopcqW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  056eaef4e69c15ab04cc8b7c12d7beffc81e603c88c885e9bb4cf00f2e4d35daN
- Size
  
  56KB
- MD5
  
  60544765fda250a3e098ad8b3d43e670
- SHA1
  
  18001b990e3a7d9a3257fffc25186468f8a5d890
- SHA256
  
  056eaef4e69c15ab04cc8b7c12d7beffc81e603c88c885e9bb4cf00f2e4d35da
- SHA512
  
  6b684d48fb37ac782c0824f23c7a83d22fa67ae07a00fe56a9df2cd940191295027e5fca2d8fe10877328c7a3167c5243abdb27020001ab2573e2f8df463dd1a
- SSDEEP
  
  1536:lJNN+PqgBcEsTaw408To2B9HO7r+6sqW:jmncR0TopcqW
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence