cc94a5774ba41a6659028b7eb186a0b3590ea01fb5463e3024eb085119752846 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cc94a5774ba41a6659028b7eb186a0b3590ea01fb5463e3024eb085119752846N
Size

406KB
Sample

240930-ps6tjazdkh
MD5

ca5d49bbca1f4bb92c420933b8ae8b20
SHA1

f1aaa6aff2f310ac47a4c37780569e24228b177a
SHA256

cc94a5774ba41a6659028b7eb186a0b3590ea01fb5463e3024eb085119752846
SHA512

2d67d81e8d1bc6f1052e97e23a80cc85a034df01ecd958f928c728eb170d6a0f7745736af80ae725ecf5bb2a87998b0405cca8713a6dd254d3911549c4d172b1
SSDEEP

6144:ruUFRfTU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:vRAMp3Ma3M3MvD3Mq3B3Mo3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  cc94a5774ba41a6659028b7eb186a0b3590ea01fb5463e3024eb085119752846N
- Size
  
  406KB
- MD5
  
  ca5d49bbca1f4bb92c420933b8ae8b20
- SHA1
  
  f1aaa6aff2f310ac47a4c37780569e24228b177a
- SHA256
  
  cc94a5774ba41a6659028b7eb186a0b3590ea01fb5463e3024eb085119752846
- SHA512
  
  2d67d81e8d1bc6f1052e97e23a80cc85a034df01ecd958f928c728eb170d6a0f7745736af80ae725ecf5bb2a87998b0405cca8713a6dd254d3911549c4d172b1
- SSDEEP
  
  6144:ruUFRfTU5U5Xj1XH5U5Xj83XH5U1XH5U5Xj8s5DXH5U5qXH5XXH5U5oXH:vRAMp3Ma3M3MvD3Mq3B3Mo3
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence