213c394ed2198e05317dc6b55b785d163a42be36120b9917bd17c334c8dba0d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

213c394ed2198e05317dc6b55b785d163a42be36120b9917bd17c334c8dba0d2
Size

359KB
Sample

240921-xxtc1aydmb
MD5

d070e0a59f8fa775fde0d80b7bf318c5
SHA1

c0f79944fa2661923a0481d38c51e96b068e2db8
SHA256

213c394ed2198e05317dc6b55b785d163a42be36120b9917bd17c334c8dba0d2
SHA512

0c7f204871bdc293fca125975ecb1bae6e4c1cdb8d1c4aa7722c1a00dd3ef35576e10b5262afee18c9901d7257b1f5ad78df2ff5a0852d01c31b959403d8994a
SSDEEP

6144:5lPkHZ9LoxYVrOigcC6oQ6+EcC6oQ6+YahBQyiTACPTRN6+YahBQyiTAgiuMRlx+:S91K9E6n9E6vah6yiMCPTRN6vah6yib9

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  213c394ed2198e05317dc6b55b785d163a42be36120b9917bd17c334c8dba0d2
- Size
  
  359KB
- MD5
  
  d070e0a59f8fa775fde0d80b7bf318c5
- SHA1
  
  c0f79944fa2661923a0481d38c51e96b068e2db8
- SHA256
  
  213c394ed2198e05317dc6b55b785d163a42be36120b9917bd17c334c8dba0d2
- SHA512
  
  0c7f204871bdc293fca125975ecb1bae6e4c1cdb8d1c4aa7722c1a00dd3ef35576e10b5262afee18c9901d7257b1f5ad78df2ff5a0852d01c31b959403d8994a
- SSDEEP
  
  6144:5lPkHZ9LoxYVrOigcC6oQ6+EcC6oQ6+YahBQyiTACPTRN6+YahBQyiTAgiuMRlx+:S91K9E6n9E6vah6yiMCPTRN6vah6yib9
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence