6db734446037287c23b5579ad8d12c5a4cc45c5db8541b0bd5401dd628dc1153 | Triage

Sharing

General

Target

6db734446037287c23b5579ad8d12c5a4cc45c5db8541b0bd5401dd628dc1153N
Size

59KB
Sample

240919-g23t8sveml
MD5

4d3d9a307dda044521d003f860b64010
SHA1

a8dca18f6ac1dd9876bf377c0f4ca8e62061109a
SHA256

6db734446037287c23b5579ad8d12c5a4cc45c5db8541b0bd5401dd628dc1153
SHA512

3ef4f7ae65b87ba5866d9eee0ce4da7606f14505a5f21bf27c593e3367ab75af5dff41cbf29c21dc2138cf959d42080d1878e5a0648d4b053e0a3fe6644f2120
SSDEEP

1536:iy0J0cU1+4WjSO5rcf23GJeD4srh2LKpO:iy0GC4c4sr6yO

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6db734446037287c23b5579ad8d12c5a4cc45c5db8541b0bd5401dd628dc1153N
- Size
  
  59KB
- MD5
  
  4d3d9a307dda044521d003f860b64010
- SHA1
  
  a8dca18f6ac1dd9876bf377c0f4ca8e62061109a
- SHA256
  
  6db734446037287c23b5579ad8d12c5a4cc45c5db8541b0bd5401dd628dc1153
- SHA512
  
  3ef4f7ae65b87ba5866d9eee0ce4da7606f14505a5f21bf27c593e3367ab75af5dff41cbf29c21dc2138cf959d42080d1878e5a0648d4b053e0a3fe6644f2120
- SSDEEP
  
  1536:iy0J0cU1+4WjSO5rcf23GJeD4srh2LKpO:iy0GC4c4sr6yO
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence