049b35d1fb006e937c47b61527cd5d939dbfce560eadda7bd0b3c44e55a48a7e | Triage

Sharing

General

Target

049b35d1fb006e937c47b61527cd5d939dbfce560eadda7bd0b3c44e55a48a7eN
Size

1.6MB
Sample

240920-w5edda1cjd
MD5

e1a738a48aba4d8605e10a71f1b348a0
SHA1

df1ae3a0c43dbe40ca31263cc98403fb60f1d8e2
SHA256

049b35d1fb006e937c47b61527cd5d939dbfce560eadda7bd0b3c44e55a48a7e
SHA512

1e44408368dc3703dc935b09149930bf9ea011a3be05d984b00329608ef4ea961c3e2afd40061489190d04d492df878c385d72025d044733a172009656a9d45a
SSDEEP

24576:ggu5YyCtCCm0BmmvFimm00h2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZF:ggu5RCtCmizbazR0vKLXZ+Ktz

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  049b35d1fb006e937c47b61527cd5d939dbfce560eadda7bd0b3c44e55a48a7eN
- Size
  
  1.6MB
- MD5
  
  e1a738a48aba4d8605e10a71f1b348a0
- SHA1
  
  df1ae3a0c43dbe40ca31263cc98403fb60f1d8e2
- SHA256
  
  049b35d1fb006e937c47b61527cd5d939dbfce560eadda7bd0b3c44e55a48a7e
- SHA512
  
  1e44408368dc3703dc935b09149930bf9ea011a3be05d984b00329608ef4ea961c3e2afd40061489190d04d492df878c385d72025d044733a172009656a9d45a
- SSDEEP
  
  24576:ggu5YyCtCCm0BmmvFimm00h2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZF:ggu5RCtCmizbazR0vKLXZ+Ktz
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence