ffc97b0213c8a7c8fe8c37c40b7e45f67874a7c669d3875550d0c55db0215760 | Triage

Sharing

General

Target

ffc97b0213c8a7c8fe8c37c40b7e45f67874a7c669d3875550d0c55db0215760
Size

96KB
Sample

240920-3xvtqavhpr
MD5

edf933253b981d8eed9b0a21867cfcb6
SHA1

d304fd047dc65dc1bb14c8c01838c9544b28dc69
SHA256

ffc97b0213c8a7c8fe8c37c40b7e45f67874a7c669d3875550d0c55db0215760
SHA512

81ccc5e98142194a354873119369cbf6928093be91f9835d754bb3120a2b2588f7beb011a0ffa656f92e502b161d6bb0eb4c190e9fd0d2b2f507a3e9672bbc87
SSDEEP

1536:gWQE6I4tGxys2y5KUhQVkzjtREZBpipNK3YTjkgzOM6bOLXi8PmCofGy:gxNYy2hQVszEoRzDrLXfzoey

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ffc97b0213c8a7c8fe8c37c40b7e45f67874a7c669d3875550d0c55db0215760
- Size
  
  96KB
- MD5
  
  edf933253b981d8eed9b0a21867cfcb6
- SHA1
  
  d304fd047dc65dc1bb14c8c01838c9544b28dc69
- SHA256
  
  ffc97b0213c8a7c8fe8c37c40b7e45f67874a7c669d3875550d0c55db0215760
- SHA512
  
  81ccc5e98142194a354873119369cbf6928093be91f9835d754bb3120a2b2588f7beb011a0ffa656f92e502b161d6bb0eb4c190e9fd0d2b2f507a3e9672bbc87
- SSDEEP
  
  1536:gWQE6I4tGxys2y5KUhQVkzjtREZBpipNK3YTjkgzOM6bOLXi8PmCofGy:gxNYy2hQVszEoRzDrLXfzoey
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence