56d10205cb9eb891480936e6e9289a1a2d9b51e93311c0062514dc9c6e376323 | Triage

Sharing

General

Target

56d10205cb9eb891480936e6e9289a1a2d9b51e93311c0062514dc9c6e376323
Size

96KB
Sample

240920-yyjqmawbjr
MD5

a97feca4905c928e799f5878b1605649
SHA1

e6bc737309638dc3750881e06e1bd9514257d71e
SHA256

56d10205cb9eb891480936e6e9289a1a2d9b51e93311c0062514dc9c6e376323
SHA512

17bf750631e48a67c5778d9a36a11b0d3c2e8c4ee2d171172c6a8adf73cdb1bffa54c233f93644c4a32bcb0ae156e03a5b1488839e1fc04672cc81d099f5d992
SSDEEP

1536:9lwdT3YXLGZX+vjD8RdBU7mLXSREXHfVPfMVwNKT1iqWUPGc4T7VL6NNDwa:D40LIzd2iCREXdXNKT1ntPG9pW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  56d10205cb9eb891480936e6e9289a1a2d9b51e93311c0062514dc9c6e376323
- Size
  
  96KB
- MD5
  
  a97feca4905c928e799f5878b1605649
- SHA1
  
  e6bc737309638dc3750881e06e1bd9514257d71e
- SHA256
  
  56d10205cb9eb891480936e6e9289a1a2d9b51e93311c0062514dc9c6e376323
- SHA512
  
  17bf750631e48a67c5778d9a36a11b0d3c2e8c4ee2d171172c6a8adf73cdb1bffa54c233f93644c4a32bcb0ae156e03a5b1488839e1fc04672cc81d099f5d992
- SSDEEP
  
  1536:9lwdT3YXLGZX+vjD8RdBU7mLXSREXHfVPfMVwNKT1iqWUPGc4T7VL6NNDwa:D40LIzd2iCREXdXNKT1ntPG9pW
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence