d60a1dcfceafea3b4cc5f08bd0c5c22e3bd93215209bdf7648f5bda3ba172c61 | Triage

Sharing

General

Target

d60a1dcfceafea3b4cc5f08bd0c5c22e3bd93215209bdf7648f5bda3ba172c61
Size

89KB
Sample

240920-a6gdgazemb
MD5

b87a607932850b9cdae1faea91f2068c
SHA1

afce92773544742aae92b55adb9e9ef30a3737ec
SHA256

d60a1dcfceafea3b4cc5f08bd0c5c22e3bd93215209bdf7648f5bda3ba172c61
SHA512

3a6a695f5e66ddf04ca6021f3d7d033364ad93c235228b8b969fd48372a4b1f708c94d3cdc95a641c668e7af1a21eb6f9e1983e5db142a1616990ca9a9210f75
SSDEEP

1536:GI5vtM4iXj/1MZ+/hKNGAqTcgGf1tFcClExkg8Fk:GI5vtpiz/qEh2TqTcgSbFcClakgwk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d60a1dcfceafea3b4cc5f08bd0c5c22e3bd93215209bdf7648f5bda3ba172c61
- Size
  
  89KB
- MD5
  
  b87a607932850b9cdae1faea91f2068c
- SHA1
  
  afce92773544742aae92b55adb9e9ef30a3737ec
- SHA256
  
  d60a1dcfceafea3b4cc5f08bd0c5c22e3bd93215209bdf7648f5bda3ba172c61
- SHA512
  
  3a6a695f5e66ddf04ca6021f3d7d033364ad93c235228b8b969fd48372a4b1f708c94d3cdc95a641c668e7af1a21eb6f9e1983e5db142a1616990ca9a9210f75
- SSDEEP
  
  1536:GI5vtM4iXj/1MZ+/hKNGAqTcgGf1tFcClExkg8Fk:GI5vtpiz/qEh2TqTcgSbFcClakgwk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence