d426017a14976378b153f49527c19f0c90faf483766a2da0a90b4c457a8c583c | Triage

Sharing

General

Target

d426017a14976378b153f49527c19f0c90faf483766a2da0a90b4c457a8c583cN
Size

380KB
Sample

240919-fhv5ls1hnd
MD5

e520e82331d562e444eab88d02442b30
SHA1

e2b39b5142d9212c2d2df5145897e403328f67a4
SHA256

d426017a14976378b153f49527c19f0c90faf483766a2da0a90b4c457a8c583c
SHA512

f90ef84a64f8a9e93450c2974a455c69715af33e7a53c6826ca0f89de44d1d19a9d990d82378552230bfd439b701150829ed92207f4efeaebdd6dade18962f15
SSDEEP

6144:4u2viHmKgw55CCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:dHmKgyOtoq5t6NSN6G5tbt5t6NSN6T

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d426017a14976378b153f49527c19f0c90faf483766a2da0a90b4c457a8c583cN
- Size
  
  380KB
- MD5
  
  e520e82331d562e444eab88d02442b30
- SHA1
  
  e2b39b5142d9212c2d2df5145897e403328f67a4
- SHA256
  
  d426017a14976378b153f49527c19f0c90faf483766a2da0a90b4c457a8c583c
- SHA512
  
  f90ef84a64f8a9e93450c2974a455c69715af33e7a53c6826ca0f89de44d1d19a9d990d82378552230bfd439b701150829ed92207f4efeaebdd6dade18962f15
- SSDEEP
  
  6144:4u2viHmKgw55CCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58Vh:dHmKgyOtoq5t6NSN6G5tbt5t6NSN6T
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence