c1162ea9ec20c146d4cae1262333c2f0e8dc993cc84570abb4181497e4c3c310 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1162ea9ec20c146d4cae1262333c2f0e8dc993cc84570abb4181497e4c3c310N
Size

359KB
Sample

240927-h71sha1fjl
MD5

a1971adcb4ad40fbd85e75654ed31870
SHA1

9bb68fd90982e4eb9d87f671c0c369c90ad7a6c5
SHA256

c1162ea9ec20c146d4cae1262333c2f0e8dc993cc84570abb4181497e4c3c310
SHA512

4d523ca87e0ff9499dbe9304a61039c83a86a538927668f5202f6e548c7e86d23b4f8076e268a5e9c90dd0359fe8bac37783cb2fbc7f07fd8d650cbf025caf05
SSDEEP

6144:tUJ7T5OIazdgAx9rYVrOigcC6oQ6+EcC6oQ6+YahBQyiTACPTRN6+YahBQyiTAg9:tq7T5OIazniK9E6n9E6vah6yiMCPTRN+

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  c1162ea9ec20c146d4cae1262333c2f0e8dc993cc84570abb4181497e4c3c310N
- Size
  
  359KB
- MD5
  
  a1971adcb4ad40fbd85e75654ed31870
- SHA1
  
  9bb68fd90982e4eb9d87f671c0c369c90ad7a6c5
- SHA256
  
  c1162ea9ec20c146d4cae1262333c2f0e8dc993cc84570abb4181497e4c3c310
- SHA512
  
  4d523ca87e0ff9499dbe9304a61039c83a86a538927668f5202f6e548c7e86d23b4f8076e268a5e9c90dd0359fe8bac37783cb2fbc7f07fd8d650cbf025caf05
- SSDEEP
  
  6144:tUJ7T5OIazdgAx9rYVrOigcC6oQ6+EcC6oQ6+YahBQyiTACPTRN6+YahBQyiTAg9:tq7T5OIazniK9E6n9E6vah6yiMCPTRN+
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence