e3b49d1d0b212ec5b207552a95701231fd3d4ba0765be2e2d44656fdec9608eb | Triage

Sharing

General

Target

e3b49d1d0b212ec5b207552a95701231fd3d4ba0765be2e2d44656fdec9608ebN
Size

320KB
Sample

240920-fe95csyhqb
MD5

f05081bbef54676f86b7bbc2a005a8a0
SHA1

c71eee6828dfd62532629c8af0ea9811ba4de91c
SHA256

e3b49d1d0b212ec5b207552a95701231fd3d4ba0765be2e2d44656fdec9608eb
SHA512

b5a691b9779b6df9bf8511e2ab9043c060f340ba69971fe41c9839deef40ea1026f139ed7de44f1806397ecfee752beeff6067352f15224a185ec0645984de9c
SSDEEP

6144:UauxDw7FQGDkaIUByO2oB3Yt3XbaHJUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mb:UGFtLH6t3XGCByvNv54B9f01ZmHByvNB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e3b49d1d0b212ec5b207552a95701231fd3d4ba0765be2e2d44656fdec9608ebN
- Size
  
  320KB
- MD5
  
  f05081bbef54676f86b7bbc2a005a8a0
- SHA1
  
  c71eee6828dfd62532629c8af0ea9811ba4de91c
- SHA256
  
  e3b49d1d0b212ec5b207552a95701231fd3d4ba0765be2e2d44656fdec9608eb
- SHA512
  
  b5a691b9779b6df9bf8511e2ab9043c060f340ba69971fe41c9839deef40ea1026f139ed7de44f1806397ecfee752beeff6067352f15224a185ec0645984de9c
- SSDEEP
  
  6144:UauxDw7FQGDkaIUByO2oB3Yt3XbaHJUByvZ6Mxv5Rar3O6B9fZSLhZmzbByvZ6Mb:UGFtLH6t3XGCByvNv54B9f01ZmHByvNB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence