37d2b33cf30674fba0c91bb7f78ebc3069b1f9f12296aaa6bd8c7bb8b630ff00 | Triage

Sharing

General

Target

37d2b33cf30674fba0c91bb7f78ebc3069b1f9f12296aaa6bd8c7bb8b630ff00N
Size

482KB
Sample

240920-3d8w8stfnf
MD5

ba4af1ce52e2fe57ac0e85c52dcae8d0
SHA1

f3bf7a32e63f2b13507c46f605df0bbba4b43168
SHA256

37d2b33cf30674fba0c91bb7f78ebc3069b1f9f12296aaa6bd8c7bb8b630ff00
SHA512

33c829298fb7fc12fc00fb6559b03155ae164b11cc707a4d7cee7b69d256a6c9760148e617d49577291e37fb4fed69239562e271211fb6bb7cf0391475223621
SSDEEP

6144:DbkrazpQXvH1Ll+wGXAF2PbgKLVGFM6234lKm3mo8Yvi4KsLTFM6234lKm3:GKmvVLMwGXAF5KLVGFB24lwR45FB24l

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  37d2b33cf30674fba0c91bb7f78ebc3069b1f9f12296aaa6bd8c7bb8b630ff00N
- Size
  
  482KB
- MD5
  
  ba4af1ce52e2fe57ac0e85c52dcae8d0
- SHA1
  
  f3bf7a32e63f2b13507c46f605df0bbba4b43168
- SHA256
  
  37d2b33cf30674fba0c91bb7f78ebc3069b1f9f12296aaa6bd8c7bb8b630ff00
- SHA512
  
  33c829298fb7fc12fc00fb6559b03155ae164b11cc707a4d7cee7b69d256a6c9760148e617d49577291e37fb4fed69239562e271211fb6bb7cf0391475223621
- SSDEEP
  
  6144:DbkrazpQXvH1Ll+wGXAF2PbgKLVGFM6234lKm3mo8Yvi4KsLTFM6234lKm3:GKmvVLMwGXAF5KLVGFB24lwR45FB24l
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence