6a0fcfe90693e1d18c9ff6ca262260ad8c6bd1bae823e311ba352cdcee648c62 | Triage

Sharing

General

Target

6a0fcfe90693e1d18c9ff6ca262260ad8c6bd1bae823e311ba352cdcee648c62N
Size

487KB
Sample

240920-3yl8zavfqh
MD5

cd809867223b482c99f11bfa34fe6d40
SHA1

48112c28deb621942f5cd13e3f5da961be12e035
SHA256

6a0fcfe90693e1d18c9ff6ca262260ad8c6bd1bae823e311ba352cdcee648c62
SHA512

8fcf7ae5b15469aac39d47ef229338654c0eb60c10738eadd4f5ad8d2d2461f3a015fd623a14a1c4ef06fb46fabf250b1cd115b6bfc100ff470e6c4c2fe5ffe7
SSDEEP

6144:Ne/9hNI2y/JAQ///NR5fLYG3eujPQ///NR5f:NeGTx/NcZ7/N

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6a0fcfe90693e1d18c9ff6ca262260ad8c6bd1bae823e311ba352cdcee648c62N
- Size
  
  487KB
- MD5
  
  cd809867223b482c99f11bfa34fe6d40
- SHA1
  
  48112c28deb621942f5cd13e3f5da961be12e035
- SHA256
  
  6a0fcfe90693e1d18c9ff6ca262260ad8c6bd1bae823e311ba352cdcee648c62
- SHA512
  
  8fcf7ae5b15469aac39d47ef229338654c0eb60c10738eadd4f5ad8d2d2461f3a015fd623a14a1c4ef06fb46fabf250b1cd115b6bfc100ff470e6c4c2fe5ffe7
- SSDEEP
  
  6144:Ne/9hNI2y/JAQ///NR5fLYG3eujPQ///NR5f:NeGTx/NcZ7/N
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence