e069010e40c606bada349875d3acca1ff7a2c6fc6a0abc34b0c0ecb58d21d931 | Triage

Sharing

General

Target

e069010e40c606bada349875d3acca1ff7a2c6fc6a0abc34b0c0ecb58d21d931N
Size

448KB
Sample

240920-tm6c2awapl
MD5

0c089c56b418b2d9e51d7263b4e68760
SHA1

76e66450f7c5b71f7e96cade8d6d8884fc3d270a
SHA256

e069010e40c606bada349875d3acca1ff7a2c6fc6a0abc34b0c0ecb58d21d931
SHA512

5a6e1392725a0b2641891bb1911751982b0ee1ada248acb3a2198081e084ff014e991e764e144cfe563d235cb0a939c85bae9a33dad0b873706dd85d1921911a
SSDEEP

3072:TKA4lzp0j5e2FI0dc8d/MJfyEkxnaaYQ2lycpQXSzU9vbT1NgNYIx33rjpu2lyc3:2+e2FIRJ6EQnT2leTLgNPx33fpu2lD

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e069010e40c606bada349875d3acca1ff7a2c6fc6a0abc34b0c0ecb58d21d931N
- Size
  
  448KB
- MD5
  
  0c089c56b418b2d9e51d7263b4e68760
- SHA1
  
  76e66450f7c5b71f7e96cade8d6d8884fc3d270a
- SHA256
  
  e069010e40c606bada349875d3acca1ff7a2c6fc6a0abc34b0c0ecb58d21d931
- SHA512
  
  5a6e1392725a0b2641891bb1911751982b0ee1ada248acb3a2198081e084ff014e991e764e144cfe563d235cb0a939c85bae9a33dad0b873706dd85d1921911a
- SSDEEP
  
  3072:TKA4lzp0j5e2FI0dc8d/MJfyEkxnaaYQ2lycpQXSzU9vbT1NgNYIx33rjpu2lyc3:2+e2FIRJ6EQnT2leTLgNPx33fpu2lD
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence