edc684d36e09ed4395c7ee85d7c1a7610e030face71ab58dd67544791278cff9 | Triage

Sharing

General

Target

edc684d36e09ed4395c7ee85d7c1a7610e030face71ab58dd67544791278cff9N
Size

56KB
Sample

240920-dsmvwawame
MD5

aef37890c60eaebb31a016e1eaeef980
SHA1

849f17bc48f909892dccfe1892ab7d94848e6e9b
SHA256

edc684d36e09ed4395c7ee85d7c1a7610e030face71ab58dd67544791278cff9
SHA512

4aa5aafec5b95b5a6dbfec238abc8ff5df558f9e7d36cd2e24fec17cf83a9f951788d84d2ce9ae37c3b5c9316870adb672935b7e8abd66013fcfab36b835dc69
SSDEEP

768:+n9oaKmJbHpuTAdi641Kxs1AItV72bWc+wIqHUMoNSkiqhpJ4pVgqtfI/1H5MaX3:+nLZJXKKxs7ULrdoNSkNyfCr

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  edc684d36e09ed4395c7ee85d7c1a7610e030face71ab58dd67544791278cff9N
- Size
  
  56KB
- MD5
  
  aef37890c60eaebb31a016e1eaeef980
- SHA1
  
  849f17bc48f909892dccfe1892ab7d94848e6e9b
- SHA256
  
  edc684d36e09ed4395c7ee85d7c1a7610e030face71ab58dd67544791278cff9
- SHA512
  
  4aa5aafec5b95b5a6dbfec238abc8ff5df558f9e7d36cd2e24fec17cf83a9f951788d84d2ce9ae37c3b5c9316870adb672935b7e8abd66013fcfab36b835dc69
- SSDEEP
  
  768:+n9oaKmJbHpuTAdi641Kxs1AItV72bWc+wIqHUMoNSkiqhpJ4pVgqtfI/1H5MaX3:+nLZJXKKxs7ULrdoNSkNyfCr
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence