152f6ecefb743a72db2e7e1f560a3dc9a500d78feea16ea898a68192ba827af9 | Triage

Sharing

General

Target

152f6ecefb743a72db2e7e1f560a3dc9a500d78feea16ea898a68192ba827af9N
Size

439KB
Sample

240920-h3fxjavdqj
MD5

f3e446a6718f04b71018d18e4037f530
SHA1

1d5e751c0a853f9520990b7249265e284cd7fe3a
SHA256

152f6ecefb743a72db2e7e1f560a3dc9a500d78feea16ea898a68192ba827af9
SHA512

eece422131bb83935a85a7309e48c78a032535b7ea171dbd538367a76cc07e7cb02dced4dcf9a4c71b5be0f58d704fc3455cf69ffdf2b1ae97555950927b272d
SSDEEP

12288:tk+PPeKm2OPeKm22Vtp90NtmVtp90NtXONt:zpEkpEY

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  152f6ecefb743a72db2e7e1f560a3dc9a500d78feea16ea898a68192ba827af9N
- Size
  
  439KB
- MD5
  
  f3e446a6718f04b71018d18e4037f530
- SHA1
  
  1d5e751c0a853f9520990b7249265e284cd7fe3a
- SHA256
  
  152f6ecefb743a72db2e7e1f560a3dc9a500d78feea16ea898a68192ba827af9
- SHA512
  
  eece422131bb83935a85a7309e48c78a032535b7ea171dbd538367a76cc07e7cb02dced4dcf9a4c71b5be0f58d704fc3455cf69ffdf2b1ae97555950927b272d
- SSDEEP
  
  12288:tk+PPeKm2OPeKm22Vtp90NtmVtp90NtXONt:zpEkpEY
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence