1840191a7478a8d8e1f8e7e63deee767210040721446228789459c3524a02c1f | Triage

Sharing

General

Target

1840191a7478a8d8e1f8e7e63deee767210040721446228789459c3524a02c1fN
Size

96KB
Sample

240919-w9n4dathnj
MD5

faba5a97ed59be2a11b9aa2ca3bea4b0
SHA1

998d83570122d5304091a7b7a733dd6463d1589c
SHA256

1840191a7478a8d8e1f8e7e63deee767210040721446228789459c3524a02c1f
SHA512

84041d9a4b7b3e289770949bf0f536d4086d3b3d8c9618d8a920bbb363b2f812a62714495573fe59733aaa38c51471f9d409f3b5800b815a07659a7d9d01982f
SSDEEP

1536:kxCG1N6OS5tHuq6KDloYvGe9E7KGpuIUEw2VwNWkaoR4gvwKTs2Lk1wPPXuhiTMX:PG1Nyp6YloYvGeCVc/8wNWgCgvwyaCPi

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  1840191a7478a8d8e1f8e7e63deee767210040721446228789459c3524a02c1fN
- Size
  
  96KB
- MD5
  
  faba5a97ed59be2a11b9aa2ca3bea4b0
- SHA1
  
  998d83570122d5304091a7b7a733dd6463d1589c
- SHA256
  
  1840191a7478a8d8e1f8e7e63deee767210040721446228789459c3524a02c1f
- SHA512
  
  84041d9a4b7b3e289770949bf0f536d4086d3b3d8c9618d8a920bbb363b2f812a62714495573fe59733aaa38c51471f9d409f3b5800b815a07659a7d9d01982f
- SSDEEP
  
  1536:kxCG1N6OS5tHuq6KDloYvGe9E7KGpuIUEw2VwNWkaoR4gvwKTs2Lk1wPPXuhiTMX:PG1Nyp6YloYvGeCVc/8wNWgCgvwyaCPi
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence