8416fe55f79f88a595653d318beac8927db6f62c62c451d723e673c657f9b32f | Triage

Sharing

General

Target

8416fe55f79f88a595653d318beac8927db6f62c62c451d723e673c657f9b32fN
Size

89KB
Sample

240920-jbremavhjm
MD5

dd155e904a152347271e27d49e8ca950
SHA1

bbdacaaeb7826d74907e64c567d6c463fd156585
SHA256

8416fe55f79f88a595653d318beac8927db6f62c62c451d723e673c657f9b32f
SHA512

a60c8b34a4903f1cd77c67604aa3c47650379c2c99fdf839fdb1fe5b8b7e8c3c55233776bacca571e878197c8d2f2199dd869e7b55e0b49da81c0d58492cf66c
SSDEEP

1536:rp5f0E6fFJbmgkkr5AiNNaeJsdzcilExkg8Fk:Vp0L9JbmFkrmANaeJs5cilakgwk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8416fe55f79f88a595653d318beac8927db6f62c62c451d723e673c657f9b32fN
- Size
  
  89KB
- MD5
  
  dd155e904a152347271e27d49e8ca950
- SHA1
  
  bbdacaaeb7826d74907e64c567d6c463fd156585
- SHA256
  
  8416fe55f79f88a595653d318beac8927db6f62c62c451d723e673c657f9b32f
- SHA512
  
  a60c8b34a4903f1cd77c67604aa3c47650379c2c99fdf839fdb1fe5b8b7e8c3c55233776bacca571e878197c8d2f2199dd869e7b55e0b49da81c0d58492cf66c
- SSDEEP
  
  1536:rp5f0E6fFJbmgkkr5AiNNaeJsdzcilExkg8Fk:Vp0L9JbmFkrmANaeJs5cilakgwk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence