21f93f2e454c6ea65e1858dfdfba8cee5f8890e4e12602db06c053f1bea6a3c6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21f93f2e454c6ea65e1858dfdfba8cee5f8890e4e12602db06c053f1bea6a3c6N
Size

128KB
Sample

241002-c9k7yatblr
MD5

ec31629dfac7cd0f4c17e57d891af070
SHA1

eecddcf18d67e3d219b0bfc2b1b0cf7da6fe0241
SHA256

21f93f2e454c6ea65e1858dfdfba8cee5f8890e4e12602db06c053f1bea6a3c6
SHA512

0323a0d7b14b7b24763552a4f14b8af1cd6c4cd1553c5148fa402b21a9f3595f1bd0754a1e6f71ef7e44edee6c17eea2105c61a6fd2642ccf4cf49a30666a6cb
SSDEEP

3072:9tVSwz/ir3k85x71AtS/peNcN1WdTCn93OGey/ZhJakrPPFi:/Pzi12tShqcuTCndOGeKTamU

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  21f93f2e454c6ea65e1858dfdfba8cee5f8890e4e12602db06c053f1bea6a3c6N
- Size
  
  128KB
- MD5
  
  ec31629dfac7cd0f4c17e57d891af070
- SHA1
  
  eecddcf18d67e3d219b0bfc2b1b0cf7da6fe0241
- SHA256
  
  21f93f2e454c6ea65e1858dfdfba8cee5f8890e4e12602db06c053f1bea6a3c6
- SHA512
  
  0323a0d7b14b7b24763552a4f14b8af1cd6c4cd1553c5148fa402b21a9f3595f1bd0754a1e6f71ef7e44edee6c17eea2105c61a6fd2642ccf4cf49a30666a6cb
- SSDEEP
  
  3072:9tVSwz/ir3k85x71AtS/peNcN1WdTCn93OGey/ZhJakrPPFi:/Pzi12tShqcuTCndOGeKTamU
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence