f0e51266292766dac97cfadf4410eabfe332a602b50af0bf1c458736094b3125 | Triage

Sharing

General

Target

f0e51266292766dac97cfadf4410eabfe332a602b50af0bf1c458736094b3125
Size

391KB
Sample

240920-bywc4asepq
MD5

e1f1d3f1760660f1d59f5c313d8af320
SHA1

54d2618a5c441fb717831de7e293287de9e2007f
SHA256

f0e51266292766dac97cfadf4410eabfe332a602b50af0bf1c458736094b3125
SHA512

0c972d4ceb4912903c4e0c6328ee64876d21102d45526685ae339956a8cf41b76f929232d0a502c822cdd2a27924b00307e335d9167a769a5ec5f1bcf3b3c89c
SSDEEP

6144:VjQ15sqhSQbraAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:5esqSQ7mNtuhUNP3cOK3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f0e51266292766dac97cfadf4410eabfe332a602b50af0bf1c458736094b3125
- Size
  
  391KB
- MD5
  
  e1f1d3f1760660f1d59f5c313d8af320
- SHA1
  
  54d2618a5c441fb717831de7e293287de9e2007f
- SHA256
  
  f0e51266292766dac97cfadf4410eabfe332a602b50af0bf1c458736094b3125
- SHA512
  
  0c972d4ceb4912903c4e0c6328ee64876d21102d45526685ae339956a8cf41b76f929232d0a502c822cdd2a27924b00307e335d9167a769a5ec5f1bcf3b3c89c
- SSDEEP
  
  6144:VjQ15sqhSQbraAfbAfNtTAfMAfFAfNPUmKyIxLfYeOO9UmKyIxL:5esqSQ7mNtuhUNP3cOK3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence