37348402853275950cc68999ba28e8f258d6a6ee0f63efbe71a98a2ca27eb782 | Triage

Sharing

General

Target

37348402853275950cc68999ba28e8f258d6a6ee0f63efbe71a98a2ca27eb782N
Size

128KB
Sample

240920-qp417sydja
MD5

0d149dd7d984f07087d70ace5dd49e00
SHA1

902377c7fc3573c24f1f1d7fc472579270b907c3
SHA256

37348402853275950cc68999ba28e8f258d6a6ee0f63efbe71a98a2ca27eb782
SHA512

4785bf2eae8e82ef760f4ac4f9b219b261cc7598570acebe27a5ba32f4b4fff30cd9996a7bbdcff83d9e06be2993636d0b5d85564f859c0566aa087a1222cf09
SSDEEP

3072:NfOvN7swwuXhG0Z2jKR1AerDtsr3vhqhEN4MAH+mbp:8vNquXhG0CKR1AelhEN4Mujp

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  37348402853275950cc68999ba28e8f258d6a6ee0f63efbe71a98a2ca27eb782N
- Size
  
  128KB
- MD5
  
  0d149dd7d984f07087d70ace5dd49e00
- SHA1
  
  902377c7fc3573c24f1f1d7fc472579270b907c3
- SHA256
  
  37348402853275950cc68999ba28e8f258d6a6ee0f63efbe71a98a2ca27eb782
- SHA512
  
  4785bf2eae8e82ef760f4ac4f9b219b261cc7598570acebe27a5ba32f4b4fff30cd9996a7bbdcff83d9e06be2993636d0b5d85564f859c0566aa087a1222cf09
- SSDEEP
  
  3072:NfOvN7swwuXhG0Z2jKR1AerDtsr3vhqhEN4MAH+mbp:8vNquXhG0CKR1AelhEN4Mujp
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence