6925702c2d69fcb084d770be2b46da604639999afcba001e26601b6b22285922 | Triage

Sharing

General

Target

6925702c2d69fcb084d770be2b46da604639999afcba001e26601b6b22285922
Size

87KB
Sample

240920-zdhs9swhlb
MD5

b294a2efc660ea4a5922798a9e285b85
SHA1

cdb96dbb3c91d862c9453014cd4b22a19fa2d294
SHA256

6925702c2d69fcb084d770be2b46da604639999afcba001e26601b6b22285922
SHA512

a873d89cf36f6d43fafd5450f90805e169d3d2f915b4ae11c5b0fc86dbe82d6b69cf1a029674b7947e369a95a8413fe7e5bd89ceb23712a706178cf466bdee8c
SSDEEP

1536:MtoIvPIC9S8pHW4PHJfRALdatC6HfCUlkcmQRQ4RRSRBDNrR0RVe7R6R8RPD2zx:MSIvPjg4PhGLcJkc9e0AnDlmbGcGFDex

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  6925702c2d69fcb084d770be2b46da604639999afcba001e26601b6b22285922
- Size
  
  87KB
- MD5
  
  b294a2efc660ea4a5922798a9e285b85
- SHA1
  
  cdb96dbb3c91d862c9453014cd4b22a19fa2d294
- SHA256
  
  6925702c2d69fcb084d770be2b46da604639999afcba001e26601b6b22285922
- SHA512
  
  a873d89cf36f6d43fafd5450f90805e169d3d2f915b4ae11c5b0fc86dbe82d6b69cf1a029674b7947e369a95a8413fe7e5bd89ceb23712a706178cf466bdee8c
- SSDEEP
  
  1536:MtoIvPIC9S8pHW4PHJfRALdatC6HfCUlkcmQRQ4RRSRBDNrR0RVe7R6R8RPD2zx:MSIvPjg4PhGLcJkc9e0AnDlmbGcGFDex
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence