de50f892dfef3e2a21777bfbc21105c206d877e4c07b16badaf03e7a2b7b056f | Triage

Sharing

General

Target

de50f892dfef3e2a21777bfbc21105c206d877e4c07b16badaf03e7a2b7b056f
Size

89KB
Sample

240920-25hcxstdpm
MD5

d5df7f0cfb09555dac39edd98b8d08c6
SHA1

102268b0288336761db89f2cc44bdbf7ca72c372
SHA256

de50f892dfef3e2a21777bfbc21105c206d877e4c07b16badaf03e7a2b7b056f
SHA512

2eaaf7080f8d2d038368b315a56f40adcd413cf26bdddd8818b45c0879e11ba13610ebca5e37b493acd5d1a0bd8a79396a3e866cf6429f22ef58b36a68977620
SSDEEP

1536:Am6OwjMCk9zIJy9ehfh/qaRSEND69czRmsSqY3M0YAmqcPelExkg8Fk:WOHCiI3LrIEND69Dn19cmlakgwk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  de50f892dfef3e2a21777bfbc21105c206d877e4c07b16badaf03e7a2b7b056f
- Size
  
  89KB
- MD5
  
  d5df7f0cfb09555dac39edd98b8d08c6
- SHA1
  
  102268b0288336761db89f2cc44bdbf7ca72c372
- SHA256
  
  de50f892dfef3e2a21777bfbc21105c206d877e4c07b16badaf03e7a2b7b056f
- SHA512
  
  2eaaf7080f8d2d038368b315a56f40adcd413cf26bdddd8818b45c0879e11ba13610ebca5e37b493acd5d1a0bd8a79396a3e866cf6429f22ef58b36a68977620
- SSDEEP
  
  1536:Am6OwjMCk9zIJy9ehfh/qaRSEND69czRmsSqY3M0YAmqcPelExkg8Fk:WOHCiI3LrIEND69Dn19cmlakgwk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence