6659f633213cfdaebaaaca7f4f9d0fa8e6d24a76a00ffe16b0866277c48c0e21 | Triage

Sharing

General

Target

6659f633213cfdaebaaaca7f4f9d0fa8e6d24a76a00ffe16b0866277c48c0e21
Size

226KB
Sample

240920-zbapwawgkb
MD5

d98779cc8b1d723e2e5ad58fec57faab
SHA1

1ce333595d0781558eb862a31c835dd33524bb39
SHA256

6659f633213cfdaebaaaca7f4f9d0fa8e6d24a76a00ffe16b0866277c48c0e21
SHA512

a491ede35904e9c34b337d8cb2618114748a6ba6a2fdaf4faa071cbf6ff4b8dfb371cd786820da7c3c0c2bf2bbc9f5acbf79e8788235bca6a42ce90e0d52d963
SSDEEP

6144:52H/u56y967CXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:e/SH5IKrEAlnLAg

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6659f633213cfdaebaaaca7f4f9d0fa8e6d24a76a00ffe16b0866277c48c0e21
- Size
  
  226KB
- MD5
  
  d98779cc8b1d723e2e5ad58fec57faab
- SHA1
  
  1ce333595d0781558eb862a31c835dd33524bb39
- SHA256
  
  6659f633213cfdaebaaaca7f4f9d0fa8e6d24a76a00ffe16b0866277c48c0e21
- SHA512
  
  a491ede35904e9c34b337d8cb2618114748a6ba6a2fdaf4faa071cbf6ff4b8dfb371cd786820da7c3c0c2bf2bbc9f5acbf79e8788235bca6a42ce90e0d52d963
- SSDEEP
  
  6144:52H/u56y967CXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:e/SH5IKrEAlnLAg
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence