c5ce986f716206db0710502cd0b913a3cc516f5d841a107c4ab66373eae942be | Triage

Sharing

General

Target

c5ce986f716206db0710502cd0b913a3cc516f5d841a107c4ab66373eae942be
Size

304KB
Sample

240920-2j9kaasdml
MD5

ee0168c9e505f0b5647d2b4afbf9627d
SHA1

0ad0720fd44f64ec898d3e7a31b8fb9abf205211
SHA256

c5ce986f716206db0710502cd0b913a3cc516f5d841a107c4ab66373eae942be
SHA512

127d2e9f46bfc6eae399a7eaee2b81469d44f6d84ab26529686ec6964cff47beb538e4da735428a754b99e3e9e033c90b893fd12d15e4c92b7c13d244e6a9564
SSDEEP

6144:lu5W8wX+K+soB3Yt3XbaHJUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6MxE:lu4+N6t3XGCByvNv54B9f01ZmHByvNE

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c5ce986f716206db0710502cd0b913a3cc516f5d841a107c4ab66373eae942be
- Size
  
  304KB
- MD5
  
  ee0168c9e505f0b5647d2b4afbf9627d
- SHA1
  
  0ad0720fd44f64ec898d3e7a31b8fb9abf205211
- SHA256
  
  c5ce986f716206db0710502cd0b913a3cc516f5d841a107c4ab66373eae942be
- SHA512
  
  127d2e9f46bfc6eae399a7eaee2b81469d44f6d84ab26529686ec6964cff47beb538e4da735428a754b99e3e9e033c90b893fd12d15e4c92b7c13d244e6a9564
- SSDEEP
  
  6144:lu5W8wX+K+soB3Yt3XbaHJUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6MxE:lu4+N6t3XGCByvNv54B9f01ZmHByvNE
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence