375710f15df992ff63b71a51d10553df98daea026069b71190c02fa0553737d2 | Triage

Sharing

General

Target

375710f15df992ff63b71a51d10553df98daea026069b71190c02fa0553737d2
Size

1.2MB
Sample

240920-x3vg9atcrn
MD5

c0ac8dace265e92d0739e4f8e0f3912e
SHA1

ce3f34d08c7148dda4a24965f8cce7cba613a72c
SHA256

375710f15df992ff63b71a51d10553df98daea026069b71190c02fa0553737d2
SHA512

72ad8810378ac0e34c85fc9d01965d953c885744b0a7de3da7c5a8a2c94acc1403d355b1081c632b43b7f25f3ec5249a0539f40c958d70c27f5d7045a6067c1f
SSDEEP

12288:mYPqqpPlFv/WHCXwpnsKvNA+XTvZHWuEo3oW2to:mKFXApsKv2EvZHp3oW2to

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  375710f15df992ff63b71a51d10553df98daea026069b71190c02fa0553737d2
- Size
  
  1.2MB
- MD5
  
  c0ac8dace265e92d0739e4f8e0f3912e
- SHA1
  
  ce3f34d08c7148dda4a24965f8cce7cba613a72c
- SHA256
  
  375710f15df992ff63b71a51d10553df98daea026069b71190c02fa0553737d2
- SHA512
  
  72ad8810378ac0e34c85fc9d01965d953c885744b0a7de3da7c5a8a2c94acc1403d355b1081c632b43b7f25f3ec5249a0539f40c958d70c27f5d7045a6067c1f
- SSDEEP
  
  12288:mYPqqpPlFv/WHCXwpnsKvNA+XTvZHWuEo3oW2to:mKFXApsKv2EvZHp3oW2to
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence