f47595657c0a441f52501f5b52806c79c9dc3d3fb4b98b9778d375d3f10a9222 | Triage

Sharing

General

Target

f47595657c0a441f52501f5b52806c79c9dc3d3fb4b98b9778d375d3f10a9222N
Size

78KB
Sample

240919-ehnvvszfjr
MD5

b280736aa36796b3c68bb30131593900
SHA1

af0660cb6656408e211aba95016699d313e21a9a
SHA256

f47595657c0a441f52501f5b52806c79c9dc3d3fb4b98b9778d375d3f10a9222
SHA512

73a518b96789b93af282bb753a9e2ad56069d7efd825599d6ac00b59e8e12fb5f037c3164089b9bd53512a39a13f97b30109a85cdddb1fda2050e67becdce1d3
SSDEEP

1536:7IG7gzh0ad4t4h5LKvTwxiVDyN+zL20gJi1ie:FUi4bmkxiVmgzL20WKt

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f47595657c0a441f52501f5b52806c79c9dc3d3fb4b98b9778d375d3f10a9222N
- Size
  
  78KB
- MD5
  
  b280736aa36796b3c68bb30131593900
- SHA1
  
  af0660cb6656408e211aba95016699d313e21a9a
- SHA256
  
  f47595657c0a441f52501f5b52806c79c9dc3d3fb4b98b9778d375d3f10a9222
- SHA512
  
  73a518b96789b93af282bb753a9e2ad56069d7efd825599d6ac00b59e8e12fb5f037c3164089b9bd53512a39a13f97b30109a85cdddb1fda2050e67becdce1d3
- SSDEEP
  
  1536:7IG7gzh0ad4t4h5LKvTwxiVDyN+zL20gJi1ie:FUi4bmkxiVmgzL20WKt
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence