fadea4fa471f46d8d2d03e9293348a498ff1b26e7d33b3284b7081e2dfce91c4 | Triage

Sharing

General

Target

fadea4fa471f46d8d2d03e9293348a498ff1b26e7d33b3284b7081e2dfce91c4N
Size

448KB
Sample

240919-g2wqxsvbre
MD5

38f16b4e7df66a59f8febef78d4415c0
SHA1

0d703cf8a3fc0db51f7c20d095d26c29d33b3f2e
SHA256

fadea4fa471f46d8d2d03e9293348a498ff1b26e7d33b3284b7081e2dfce91c4
SHA512

553cda286b338633a49b32c81048b3f85cf5603d540ab1f702e1a7f347137e409323b16abb39f60a688ce8cc8c335aeea7ab9bd5670c3e786e2393a3808b96b6
SSDEEP

6144:PArSjn6JiWxiLUmKyIxLDXXoq9FJZCUmKyIxL:PArSD6JH832XXf9Do3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  fadea4fa471f46d8d2d03e9293348a498ff1b26e7d33b3284b7081e2dfce91c4N
- Size
  
  448KB
- MD5
  
  38f16b4e7df66a59f8febef78d4415c0
- SHA1
  
  0d703cf8a3fc0db51f7c20d095d26c29d33b3f2e
- SHA256
  
  fadea4fa471f46d8d2d03e9293348a498ff1b26e7d33b3284b7081e2dfce91c4
- SHA512
  
  553cda286b338633a49b32c81048b3f85cf5603d540ab1f702e1a7f347137e409323b16abb39f60a688ce8cc8c335aeea7ab9bd5670c3e786e2393a3808b96b6
- SSDEEP
  
  6144:PArSjn6JiWxiLUmKyIxLDXXoq9FJZCUmKyIxL:PArSD6JH832XXf9Do3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence