cab09378f33e7b198e5a44e9b550265bbdc6eda8a37748d7c4cea402c42241ed | Triage

Sharing

General

Target

cab09378f33e7b198e5a44e9b550265bbdc6eda8a37748d7c4cea402c42241edN
Size

96KB
Sample

240920-3w9w9avhmr
MD5

626b50f5775dc5c7a490b62d7b6be930
SHA1

5383a800bc47ee55e14cb21f8f5020ac8d75e6ac
SHA256

cab09378f33e7b198e5a44e9b550265bbdc6eda8a37748d7c4cea402c42241ed
SHA512

ecf9171f9a780f730ec4231aa7901d6643aa42064fdb5502b0536b17be7bb53edbc7903d30dc41f936a1a25409ab137c267e70d271a1f70619868c337de3cb93
SSDEEP

1536:eAQ0qjB1FfLCo2iYhaCziJXuPZFoxhUbYYOM6bOLXi8PmCofGy:eAqjDFfR61no3UbYYDrLXfzoey

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  cab09378f33e7b198e5a44e9b550265bbdc6eda8a37748d7c4cea402c42241edN
- Size
  
  96KB
- MD5
  
  626b50f5775dc5c7a490b62d7b6be930
- SHA1
  
  5383a800bc47ee55e14cb21f8f5020ac8d75e6ac
- SHA256
  
  cab09378f33e7b198e5a44e9b550265bbdc6eda8a37748d7c4cea402c42241ed
- SHA512
  
  ecf9171f9a780f730ec4231aa7901d6643aa42064fdb5502b0536b17be7bb53edbc7903d30dc41f936a1a25409ab137c267e70d271a1f70619868c337de3cb93
- SSDEEP
  
  1536:eAQ0qjB1FfLCo2iYhaCziJXuPZFoxhUbYYOM6bOLXi8PmCofGy:eAqjDFfR61no3UbYYDrLXfzoey
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence