407749c9862fa3fd6219065cb7ccd4f135a06dbcb7d69342b9badda9273fa292

Sharing

Copy URL

Twitter E-mail

General

Target

407749c9862fa3fd6219065cb7ccd4f135a06dbcb7d69342b9badda9273fa292N
Size

2.6MB
Sample

240921-a1sjjsxbnr
MD5

e4bca8028198e6bfc5c93c5599b50b20
SHA1

0e1a342059e93a7d41035b0eaa020d8ae814c795
SHA256

407749c9862fa3fd6219065cb7ccd4f135a06dbcb7d69342b9badda9273fa292
SHA512

7136202fbbb67fe570e36f902dd9616b0ef67b9f785e06ac9ed135fc00c9e48ec0bdcada8b5a7b0e51896504f29e05ed06ea3169d784ca596f3b6df93105fc7f
SSDEEP

49152:mCO3E1DLGDOmRoZXf994bBlHYh/KURaymOdfnjxhRAZ/e1Cqk10SBj0XlHdbBZUu:eOLGasavK0/faymOdfnjxhaZfR102QVT

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  407749c9862fa3fd6219065cb7ccd4f135a06dbcb7d69342b9badda9273fa292N
- Size
  
  2.6MB
- MD5
  
  e4bca8028198e6bfc5c93c5599b50b20
- SHA1
  
  0e1a342059e93a7d41035b0eaa020d8ae814c795
- SHA256
  
  407749c9862fa3fd6219065cb7ccd4f135a06dbcb7d69342b9badda9273fa292
- SHA512
  
  7136202fbbb67fe570e36f902dd9616b0ef67b9f785e06ac9ed135fc00c9e48ec0bdcada8b5a7b0e51896504f29e05ed06ea3169d784ca596f3b6df93105fc7f
- SSDEEP
  
  49152:mCO3E1DLGDOmRoZXf994bBlHYh/KURaymOdfnjxhRAZ/e1Cqk10SBj0XlHdbBZUu:eOLGasavK0/faymOdfnjxhaZfR102QVT
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  
  $PLUGINSDIR/NSISdl.dll
- Size
  
  72KB
- MD5
  
  b13935bfa7a3e43c112bd9fa02f08f28
- SHA1
  
  dec4f136057097c412f53c2ae41b80a8ad0c6810
- SHA256
  
  796f7efb91904fa4105528e18f6f87e3fdab9a070dabef83e02f9ae375b2b060
- SHA512
  
  1b92cde7bf74fc181b4d2602a269ef1f581b75eb67e3e46b256ddaddc153b95ee17d422a56ca04d68eafe61ab468b708f7f3691f3b47c554a67af00d49b2709a
- SSDEEP
  
  1536:Xq1go754oPtqTbIrKZYexTTvIUQt85rFmTwHoUgyX:Xqh14oPtjp6vIUQt85rboUgyX
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  
  $TEMP/windll.dll
- Size
  
  128KB
- MD5
  
  3752b12d253975e2e57d1019f0694c1b
- SHA1
  
  21540d83c8a5a411a2a8136945a742db396a5196
- SHA256
  
  7f0b77ee743f5ff9c3dc55c3215f2151fe57a3fdec710f8473fbe4c95120d2b9
- SHA512
  
  a85a9d7cda719cdd50409ddf7729f40193d87f0b853372989fd0a9803c0af3d3e441a7022a1dae4b35047ed35714ca295c17239b5acb3266b8f6d8f2957e5d50
- SSDEEP
  
  3072:ZY3Mxe4bs9QeFfo/ZLnuRfooq5lH+XbeQmjkUUZEDPUIQrYS0NY:ZY3Mxe4bPeJoBLnagoqLkeQNpeDPeR0q
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Loads dropped DLL
behavioral5 behavioral6
- Target
  
  $TEMP/word-repair-software-3.0.exe
- Size
  
  2.5MB
- MD5
  
  4507e7f8735f635c3a8d7e68065c84f5
- SHA1
  
  8ee35074ed849951ab20adaf17fe94b547052b84
- SHA256
  
  ff56cd8c718acaecb7f1430126731818be51d66ab0c0e5543dd22770510b6f9c
- SHA512
  
  8c3105fd3ac57281bcbdae89421cc37e7aa3e145c5ece4ad7a89a9702e721bb8780c7829b182b4c42d86ea382bda1d014d43fc0fe73a89a60f25e2e9642ec394
- SSDEEP
  
  49152:L2XOSt1QL6DTmm/Z2I99PbSHnfLsfUgZ4m2dxfv4a+lWY+hCqr17Sjj0blHnSq:CxML6nZgGijsxZ4m2dxfv4a2WOS17uQ9
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
behavioral7 behavioral8

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Adds autorun key to be loaded by Explorer.exe on startup

Loads dropped DLL

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8