25b98551839d4a9f0d1aab00d1df121e36974b8740cc2e411af6c05a1e1e0056 | Triage

Sharing

General

Target

25b98551839d4a9f0d1aab00d1df121e36974b8740cc2e411af6c05a1e1e0056N
Size

87KB
Sample

240920-s4xlsavblj
MD5

c0869efe89ffe957aa4cb2008540b180
SHA1

af348070977fbc7c7a795d7f3d19fae6ebbf5e6b
SHA256

25b98551839d4a9f0d1aab00d1df121e36974b8740cc2e411af6c05a1e1e0056
SHA512

c6518e611dfd42453c912f982beb63ea954f0414ff32395f0852fddde930aada5c4731d109aa68f546df3c9cca1e2a236dac146d8489dbee1d792873bebf0bda
SSDEEP

1536:WmW0jg2b5Aq+wfLY02wlTFKMj8wBL0O8Eh2R7MlKh8oAEAaMSNRQ42RSRBDNrR0H:WmNjg2b5Aq+wfLY02wlTFKI8iLKM2R7+

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  25b98551839d4a9f0d1aab00d1df121e36974b8740cc2e411af6c05a1e1e0056N
- Size
  
  87KB
- MD5
  
  c0869efe89ffe957aa4cb2008540b180
- SHA1
  
  af348070977fbc7c7a795d7f3d19fae6ebbf5e6b
- SHA256
  
  25b98551839d4a9f0d1aab00d1df121e36974b8740cc2e411af6c05a1e1e0056
- SHA512
  
  c6518e611dfd42453c912f982beb63ea954f0414ff32395f0852fddde930aada5c4731d109aa68f546df3c9cca1e2a236dac146d8489dbee1d792873bebf0bda
- SSDEEP
  
  1536:WmW0jg2b5Aq+wfLY02wlTFKMj8wBL0O8Eh2R7MlKh8oAEAaMSNRQ42RSRBDNrR0H:WmNjg2b5Aq+wfLY02wlTFKI8iLKM2R7+
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence