b83fd2b50a37f88e8323e7164f74a2de5d18d6cc4412f7b7790e336469fb2039 | Triage

Sharing

General

Target

b83fd2b50a37f88e8323e7164f74a2de5d18d6cc4412f7b7790e336469fb2039N
Size

376KB
Sample

240919-ek4dbszemb
MD5

e40ddf94747b9ae92043ebd511945a00
SHA1

a8350976ab95be61a82607723db184435a89ae6a
SHA256

b83fd2b50a37f88e8323e7164f74a2de5d18d6cc4412f7b7790e336469fb2039
SHA512

d7b4d947d36ae835412282cc80f2c6e79cdc6326a27bcbeeb5603642bed8a7341bed783cdee411b60b7ba6371c648a28d11be5d0b74bde29bf10da4b4ab90938
SSDEEP

6144:5/AVPXuapoaCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m30gsbi:5/yuqFHRFbeE8m5se

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b83fd2b50a37f88e8323e7164f74a2de5d18d6cc4412f7b7790e336469fb2039N
- Size
  
  376KB
- MD5
  
  e40ddf94747b9ae92043ebd511945a00
- SHA1
  
  a8350976ab95be61a82607723db184435a89ae6a
- SHA256
  
  b83fd2b50a37f88e8323e7164f74a2de5d18d6cc4412f7b7790e336469fb2039
- SHA512
  
  d7b4d947d36ae835412282cc80f2c6e79cdc6326a27bcbeeb5603642bed8a7341bed783cdee411b60b7ba6371c648a28d11be5d0b74bde29bf10da4b4ab90938
- SSDEEP
  
  6144:5/AVPXuapoaCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m30gsbi:5/yuqFHRFbeE8m5se
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence