9c6f60add4dff4cd13fafc5717b4af4e6082bb4cc3421e598e91ddf5a8e39d46 | Triage

Sharing

General

Target

9c6f60add4dff4cd13fafc5717b4af4e6082bb4cc3421e598e91ddf5a8e39d46
Size

64KB
Sample

240930-m39bas1fkr
MD5

aa4d24f7e4d91b976015587f12e5a12a
SHA1

0f2dd78b7ca06f2f0353e2a9285aa2c8babb3d7e
SHA256

9c6f60add4dff4cd13fafc5717b4af4e6082bb4cc3421e598e91ddf5a8e39d46
SHA512

7149f878b47981c8e112a0f1ab0ce501a15ce8ad8b353fa80ea806d4880fd0da8f6abd57c4e09d22cbd787c2c4399c1851fa56f77d76aa6c171ed186dad8d127
SSDEEP

1536:lZKPJ/oqJZ5aHyQboyEs41HUXruCHcpzt/Idn:lZgwqJZ8S3yEs6pFwn

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9c6f60add4dff4cd13fafc5717b4af4e6082bb4cc3421e598e91ddf5a8e39d46
- Size
  
  64KB
- MD5
  
  aa4d24f7e4d91b976015587f12e5a12a
- SHA1
  
  0f2dd78b7ca06f2f0353e2a9285aa2c8babb3d7e
- SHA256
  
  9c6f60add4dff4cd13fafc5717b4af4e6082bb4cc3421e598e91ddf5a8e39d46
- SHA512
  
  7149f878b47981c8e112a0f1ab0ce501a15ce8ad8b353fa80ea806d4880fd0da8f6abd57c4e09d22cbd787c2c4399c1851fa56f77d76aa6c171ed186dad8d127
- SSDEEP
  
  1536:lZKPJ/oqJZ5aHyQboyEs41HUXruCHcpzt/Idn:lZgwqJZ8S3yEs6pFwn
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence