70a8a32781877f9ceac4ab2e2045418a555d8f34a6a103d423b15fe6439588f8 | Triage

Sharing

General

Target

70a8a32781877f9ceac4ab2e2045418a555d8f34a6a103d423b15fe6439588f8
Size

448KB
Sample

240920-zj8lwaxdkn
MD5

adb6f80a414996b8966e1402177a91bc
SHA1

716540c67e64a8222775d1084f867bd576b62484
SHA256

70a8a32781877f9ceac4ab2e2045418a555d8f34a6a103d423b15fe6439588f8
SHA512

4d62b334a90fc16909588422d8eda4732494d0790fe9d8528c4eb93de4357f1fc4f628e39f803302d16433690470913e8a47bb2ec1c142f51d8a81d37317835e
SSDEEP

6144:ECU5k/JNvqyOgo35e/yCthvUCQO+zrWnAdqjeOpKfduBX:ECU5k/Tvqgu5YyCtCC/+zrWAI5KFu

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  70a8a32781877f9ceac4ab2e2045418a555d8f34a6a103d423b15fe6439588f8
- Size
  
  448KB
- MD5
  
  adb6f80a414996b8966e1402177a91bc
- SHA1
  
  716540c67e64a8222775d1084f867bd576b62484
- SHA256
  
  70a8a32781877f9ceac4ab2e2045418a555d8f34a6a103d423b15fe6439588f8
- SHA512
  
  4d62b334a90fc16909588422d8eda4732494d0790fe9d8528c4eb93de4357f1fc4f628e39f803302d16433690470913e8a47bb2ec1c142f51d8a81d37317835e
- SSDEEP
  
  6144:ECU5k/JNvqyOgo35e/yCthvUCQO+zrWnAdqjeOpKfduBX:ECU5k/Tvqgu5YyCtCC/+zrWAI5KFu
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence