ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149 | Triage

Sharing

General

Target

ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149N
Size

60KB
Sample

240929-3bz7bazbje
MD5

f7d92477d394b736e6d419bed88f93a0
SHA1

96a1ae79fbd12ca512dd23e64012ccefe11c90fa
SHA256

ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149
SHA512

d84f53db16f30b974e1abf75a6be7340616b6740a4a9914fe426de82f386753c23646c7d2469ba96c3713db853b5245dcd11fca7d8d6f74deba34c285b5691b6
SSDEEP

1536:t23iU4w8rY81GPtQRb3JbiNyOOZsQmZVXQ:t2yU4wWuS/OO+PTXQ

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149N
- Size
  
  60KB
- MD5
  
  f7d92477d394b736e6d419bed88f93a0
- SHA1
  
  96a1ae79fbd12ca512dd23e64012ccefe11c90fa
- SHA256
  
  ae0a0be2309cd241dea6e4a4994c78220c067856f00b45da0bb3d81d3472f149
- SHA512
  
  d84f53db16f30b974e1abf75a6be7340616b6740a4a9914fe426de82f386753c23646c7d2469ba96c3713db853b5245dcd11fca7d8d6f74deba34c285b5691b6
- SSDEEP
  
  1536:t23iU4w8rY81GPtQRb3JbiNyOOZsQmZVXQ:t2yU4wWuS/OO+PTXQ
Score

7^/10

persistence discovery
- Boot or Logon Autostart Execution: Print Processors
  Adversaries may abuse print processors to run malicious DLLs during system boot for persistence and/or privilege escalation.
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Print Processors

Privilege Escalation

Boot or Logon Autostart Execution

Print Processors

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2