edfac67a86e6ed70f750d0d7dca40160d0cba4fa8e7c0e3b37d1190ad3ccdf7d | Triage

Sharing

General

Target

edfac67a86e6ed70f750d0d7dca40160d0cba4fa8e7c0e3b37d1190ad3ccdf7d
Size

125KB
Sample

240919-dpdsssyaqj
MD5

5430aab2659fe610a51157e57f9138f2
SHA1

278e78b2a1e3c3b5ae7cabc0f4758fd91db57772
SHA256

edfac67a86e6ed70f750d0d7dca40160d0cba4fa8e7c0e3b37d1190ad3ccdf7d
SHA512

02a2d2f38a0ae2e7e6d31e77c481e390ab9bc4098055723d98c60f8706d48c2844eb0396dfb45d22c5bd4501e8513c0568cecb7860a185367d275d224e26fdfc
SSDEEP

3072:nc/l0W/uHjl/N02ci1WdTCn93OGey/ZhJakrPF:naGW/uHU2cRTCndOGeKTaG

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  edfac67a86e6ed70f750d0d7dca40160d0cba4fa8e7c0e3b37d1190ad3ccdf7d
- Size
  
  125KB
- MD5
  
  5430aab2659fe610a51157e57f9138f2
- SHA1
  
  278e78b2a1e3c3b5ae7cabc0f4758fd91db57772
- SHA256
  
  edfac67a86e6ed70f750d0d7dca40160d0cba4fa8e7c0e3b37d1190ad3ccdf7d
- SHA512
  
  02a2d2f38a0ae2e7e6d31e77c481e390ab9bc4098055723d98c60f8706d48c2844eb0396dfb45d22c5bd4501e8513c0568cecb7860a185367d275d224e26fdfc
- SSDEEP
  
  3072:nc/l0W/uHjl/N02ci1WdTCn93OGey/ZhJakrPF:naGW/uHU2cRTCndOGeKTaG
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence