6211b0072db2bc4b4949168c80e423eadb1f0b28fbeeb06da70d9b3b32da8c7d | Triage

Sharing

General

Target

6211b0072db2bc4b4949168c80e423eadb1f0b28fbeeb06da70d9b3b32da8c7dN
Size

406KB
Sample

240920-hzgpnathpf
MD5

eb32c1e2d987ccf9fd91b229b3a553c0
SHA1

d5368d0993868dd0a4fc4a4d0fc12eb236aea630
SHA256

6211b0072db2bc4b4949168c80e423eadb1f0b28fbeeb06da70d9b3b32da8c7d
SHA512

e42dcda83bee90c0749014c49764bd7d6475eedcb0f7cbd99737015f1a06190e8b2d4c10eb932861bd3fa78b53192f173ce8aa8dd92a287e69e84135dce12d54
SSDEEP

6144:W/wDyEiU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:WMHMp3Ma3M3MvD3Mq3B3Mo3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6211b0072db2bc4b4949168c80e423eadb1f0b28fbeeb06da70d9b3b32da8c7dN
- Size
  
  406KB
- MD5
  
  eb32c1e2d987ccf9fd91b229b3a553c0
- SHA1
  
  d5368d0993868dd0a4fc4a4d0fc12eb236aea630
- SHA256
  
  6211b0072db2bc4b4949168c80e423eadb1f0b28fbeeb06da70d9b3b32da8c7d
- SHA512
  
  e42dcda83bee90c0749014c49764bd7d6475eedcb0f7cbd99737015f1a06190e8b2d4c10eb932861bd3fa78b53192f173ce8aa8dd92a287e69e84135dce12d54
- SSDEEP
  
  6144:W/wDyEiU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:WMHMp3Ma3M3MvD3Mq3B3Mo3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence