9a57c408a91139d4b7dbe93fc06017d36d70c4af7f2be996ebe8ef411c6ea2fe | Triage

Sharing

General

Target

9a57c408a91139d4b7dbe93fc06017d36d70c4af7f2be996ebe8ef411c6ea2feN
Size

128KB
Sample

240920-wkjscszane
MD5

abd838f5ccf7e24cf738e0798d10b140
SHA1

2894252b023c8533cf7d52172abc40686dc8172e
SHA256

9a57c408a91139d4b7dbe93fc06017d36d70c4af7f2be996ebe8ef411c6ea2fe
SHA512

eb2f088a54faad692054bc5b182e77f4d5d07b9c6e516ff2d879792b4eb229c4fedbc1aa1aa759947bad6783d49c0ca56522a19ce41b1c3b4fa47673d7107a51
SSDEEP

3072:fu9MXbLf4++miDrLXfzoeqarm9mTKpAImA:fXPfqtXfxqySSKpRmA

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9a57c408a91139d4b7dbe93fc06017d36d70c4af7f2be996ebe8ef411c6ea2feN
- Size
  
  128KB
- MD5
  
  abd838f5ccf7e24cf738e0798d10b140
- SHA1
  
  2894252b023c8533cf7d52172abc40686dc8172e
- SHA256
  
  9a57c408a91139d4b7dbe93fc06017d36d70c4af7f2be996ebe8ef411c6ea2fe
- SHA512
  
  eb2f088a54faad692054bc5b182e77f4d5d07b9c6e516ff2d879792b4eb229c4fedbc1aa1aa759947bad6783d49c0ca56522a19ce41b1c3b4fa47673d7107a51
- SSDEEP
  
  3072:fu9MXbLf4++miDrLXfzoeqarm9mTKpAImA:fXPfqtXfxqySSKpRmA
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence