1ffc5e27d5aca993bb3426c576e15499eb85bc16acb94c3755b456839e5b34c9 | Triage

Sharing

General

Target

1ffc5e27d5aca993bb3426c576e15499eb85bc16acb94c3755b456839e5b34c9N
Size

234KB
Sample

240928-pvxcwayfkh
MD5

f2c86894eaf1eb32a0504c7540220290
SHA1

aec00cfdacc0f0f8ae8d3cdb8dda61fb87245e3a
SHA256

1ffc5e27d5aca993bb3426c576e15499eb85bc16acb94c3755b456839e5b34c9
SHA512

55c31a3953d4d4c277daebbdf61ed4f555e5631946ec57abec0914464404e2685cd6ccf09230a6f3d038614ee653e7a4ebf735ef7686abfc06ace0a45b22a41c
SSDEEP

3072:h5xP/oznBDojDW2tozrwy6CB3bBLdK7SAI9ud8Qq2sNNIOzpfH9S6jlRDNNAXFk+:hr5XRouCB3hd62uyQq2sR5dn5NIFk+

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  1ffc5e27d5aca993bb3426c576e15499eb85bc16acb94c3755b456839e5b34c9N
- Size
  
  234KB
- MD5
  
  f2c86894eaf1eb32a0504c7540220290
- SHA1
  
  aec00cfdacc0f0f8ae8d3cdb8dda61fb87245e3a
- SHA256
  
  1ffc5e27d5aca993bb3426c576e15499eb85bc16acb94c3755b456839e5b34c9
- SHA512
  
  55c31a3953d4d4c277daebbdf61ed4f555e5631946ec57abec0914464404e2685cd6ccf09230a6f3d038614ee653e7a4ebf735ef7686abfc06ace0a45b22a41c
- SSDEEP
  
  3072:h5xP/oznBDojDW2tozrwy6CB3bBLdK7SAI9ud8Qq2sNNIOzpfH9S6jlRDNNAXFk+:hr5XRouCB3hd62uyQq2sR5dn5NIFk+
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence