bdd8f5813f0e031c7e9f304ef4f3566fb333edbf795231b60304c1529e3c4385 | Triage

Sharing

General

Target

bdd8f5813f0e031c7e9f304ef4f3566fb333edbf795231b60304c1529e3c4385N
Size

93KB
Sample

240920-v5qkzayfnp
MD5

84f73d7badae787b86cf374e1fec0f30
SHA1

a68f1d818307850669cbef606adb4d586524cf74
SHA256

bdd8f5813f0e031c7e9f304ef4f3566fb333edbf795231b60304c1529e3c4385
SHA512

109caa199636beb27821c40075ceb6caa6f81001fe3454fd2c5024ab0ef134edd7a804281ec50f32b6aa93d9d08598fa5eb33f6a4f873699513db775e167a19d
SSDEEP

1536:JY8q6mGcXmD338MYexpoyRfQiK6r+05PsaMiwihtIbbpkp:JU63EmDn8Mj3oyRwQ+05PdMiwaIbbpkp

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bdd8f5813f0e031c7e9f304ef4f3566fb333edbf795231b60304c1529e3c4385N
- Size
  
  93KB
- MD5
  
  84f73d7badae787b86cf374e1fec0f30
- SHA1
  
  a68f1d818307850669cbef606adb4d586524cf74
- SHA256
  
  bdd8f5813f0e031c7e9f304ef4f3566fb333edbf795231b60304c1529e3c4385
- SHA512
  
  109caa199636beb27821c40075ceb6caa6f81001fe3454fd2c5024ab0ef134edd7a804281ec50f32b6aa93d9d08598fa5eb33f6a4f873699513db775e167a19d
- SSDEEP
  
  1536:JY8q6mGcXmD338MYexpoyRfQiK6r+05PsaMiwihtIbbpkp:JU63EmDn8Mj3oyRwQ+05PdMiwaIbbpkp
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence