a6fb081d7f01f79777bdee0ec4c438dddd7fe322af28292dac09b467567d8430 | Triage

Sharing

General

Target

a6fb081d7f01f79777bdee0ec4c438dddd7fe322af28292dac09b467567d8430N
Size

160KB
Sample

240920-n9v8pavfrf
MD5

cd4754e587037feecddcaa1cf3212c90
SHA1

d399691efbf706cfec31e25cf660b7711c2a2bc5
SHA256

a6fb081d7f01f79777bdee0ec4c438dddd7fe322af28292dac09b467567d8430
SHA512

eb9f43fa086138b678cd80d01f5bb560895e98f543cbcd615902687fce2174666045ae1ac1cd9efa968a3567ac97d77d46dd93e4adbc90c1bb811486a7bb0166
SSDEEP

3072:IaxotcLJSKEzCr6Ev5K7F86aerSJdEN0s4WE+3S9pui6yYPaI7DehizrVtNe:IaxotkSZEveT+ENm+3Mpui6yYPaIGck

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a6fb081d7f01f79777bdee0ec4c438dddd7fe322af28292dac09b467567d8430N
- Size
  
  160KB
- MD5
  
  cd4754e587037feecddcaa1cf3212c90
- SHA1
  
  d399691efbf706cfec31e25cf660b7711c2a2bc5
- SHA256
  
  a6fb081d7f01f79777bdee0ec4c438dddd7fe322af28292dac09b467567d8430
- SHA512
  
  eb9f43fa086138b678cd80d01f5bb560895e98f543cbcd615902687fce2174666045ae1ac1cd9efa968a3567ac97d77d46dd93e4adbc90c1bb811486a7bb0166
- SSDEEP
  
  3072:IaxotcLJSKEzCr6Ev5K7F86aerSJdEN0s4WE+3S9pui6yYPaI7DehizrVtNe:IaxotkSZEveT+ENm+3Mpui6yYPaIGck
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence