bcbff1a5efd190c0f651d7d7b842590e61a9bb0e11ac7cc97fbcbfb82f7da05d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bcbff1a5efd190c0f651d7d7b842590e61a9bb0e11ac7cc97fbcbfb82f7da05dN
Size

59KB
Sample

240927-q2t2rsxfnd
MD5

e9d7eb31a6f7e3e7d16b30a639fa8610
SHA1

efc5f7e23db20179cea3177cc61764e4ce565af5
SHA256

bcbff1a5efd190c0f651d7d7b842590e61a9bb0e11ac7cc97fbcbfb82f7da05d
SHA512

d65c98293c4702a97d4e54b8a178f1d8417a139a738ce4b7ee7f420588a088ac835579a16d03b7fb4c4eee2d4ec6c663f18e92bc2af6253a9c55517cb96fe0f2
SSDEEP

768:YRscCvfYhfMBoYh1+57d0hfVUMXkSz1eVGwBHXeuNI+NHN2p/1H5fHXdnhfXaXdh:YmRUEBoY7+5qVVdXt1eVB3p++n2LFdO

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  bcbff1a5efd190c0f651d7d7b842590e61a9bb0e11ac7cc97fbcbfb82f7da05dN
- Size
  
  59KB
- MD5
  
  e9d7eb31a6f7e3e7d16b30a639fa8610
- SHA1
  
  efc5f7e23db20179cea3177cc61764e4ce565af5
- SHA256
  
  bcbff1a5efd190c0f651d7d7b842590e61a9bb0e11ac7cc97fbcbfb82f7da05d
- SHA512
  
  d65c98293c4702a97d4e54b8a178f1d8417a139a738ce4b7ee7f420588a088ac835579a16d03b7fb4c4eee2d4ec6c663f18e92bc2af6253a9c55517cb96fe0f2
- SSDEEP
  
  768:YRscCvfYhfMBoYh1+57d0hfVUMXkSz1eVGwBHXeuNI+NHN2p/1H5fHXdnhfXaXdh:YmRUEBoY7+5qVVdXt1eVB3p++n2LFdO
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence