5eb994f8ff84fb3a7e0fe0a2a581c82c1eb9a2eca2b9944ff83927e7dbb06d4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5eb994f8ff84fb3a7e0fe0a2a581c82c1eb9a2eca2b9944ff83927e7dbb06d4bN
Size

80KB
Sample

240928-vpxz4szbkf
MD5

c728b677b8b31bb92eb0e0a613881b10
SHA1

e96f826969db88e7295249414f8da986e337ed80
SHA256

5eb994f8ff84fb3a7e0fe0a2a581c82c1eb9a2eca2b9944ff83927e7dbb06d4b
SHA512

bbe37d5ff43e9ba511b9ea95f0ca448baa168204e3b15dc9cd068cc92d087b63e470697ed90b72283aef7260c6130f757798003edc6c56fc305d78cb517918e5
SSDEEP

1536:kDHMM7NeeTNC43vE8opp6H0DK0tl5YMkhohBE8VGh:kDHLUeZCKv7o76H0DK0tXUAEQGh

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5eb994f8ff84fb3a7e0fe0a2a581c82c1eb9a2eca2b9944ff83927e7dbb06d4bN
- Size
  
  80KB
- MD5
  
  c728b677b8b31bb92eb0e0a613881b10
- SHA1
  
  e96f826969db88e7295249414f8da986e337ed80
- SHA256
  
  5eb994f8ff84fb3a7e0fe0a2a581c82c1eb9a2eca2b9944ff83927e7dbb06d4b
- SHA512
  
  bbe37d5ff43e9ba511b9ea95f0ca448baa168204e3b15dc9cd068cc92d087b63e470697ed90b72283aef7260c6130f757798003edc6c56fc305d78cb517918e5
- SSDEEP
  
  1536:kDHMM7NeeTNC43vE8opp6H0DK0tl5YMkhohBE8VGh:kDHLUeZCKv7o76H0DK0tXUAEQGh
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence