61df22aee715f8cbe7a29a6c0d983c0f862f1380ff94a430e9883beb93e64c95 | Triage

Sharing

General

Target

61df22aee715f8cbe7a29a6c0d983c0f862f1380ff94a430e9883beb93e64c95
Size

84KB
Sample

240928-2be1psyenq
MD5

c5264667141568e93ada31d0e97d39d8
SHA1

c78faf1cc8da7e47979c37c759ad30636cccc304
SHA256

61df22aee715f8cbe7a29a6c0d983c0f862f1380ff94a430e9883beb93e64c95
SHA512

93c18c0d984ee24755a9f4098b2d2fc41308c5e21bd6a20d753ea61466e1000c6a59f097236f9e9aa038cc41b2c9fffba05ebfed3511b25bb9f847359b49865d
SSDEEP

1536:XlTFyen0xKUPOtY2KlFyo5rO48xXSREXHfVPfMVwNKT1iqWUPGc4T7VLd:VTnBtL7o5rcxCREXdXNKT1ntPG9pB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  61df22aee715f8cbe7a29a6c0d983c0f862f1380ff94a430e9883beb93e64c95
- Size
  
  84KB
- MD5
  
  c5264667141568e93ada31d0e97d39d8
- SHA1
  
  c78faf1cc8da7e47979c37c759ad30636cccc304
- SHA256
  
  61df22aee715f8cbe7a29a6c0d983c0f862f1380ff94a430e9883beb93e64c95
- SHA512
  
  93c18c0d984ee24755a9f4098b2d2fc41308c5e21bd6a20d753ea61466e1000c6a59f097236f9e9aa038cc41b2c9fffba05ebfed3511b25bb9f847359b49865d
- SSDEEP
  
  1536:XlTFyen0xKUPOtY2KlFyo5rO48xXSREXHfVPfMVwNKT1iqWUPGc4T7VLd:VTnBtL7o5rcxCREXdXNKT1ntPG9pB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence