759633a5a723db013fa208423f30620437e99a213be289201e757f0236d23f45 | Triage

Sharing

General

Target

759633a5a723db013fa208423f30620437e99a213be289201e757f0236d23f45N
Size

89KB
Sample

241002-fwa2layekr
MD5

2c2b0958c0c7cc5a6643860a63fcab40
SHA1

e6c183ddf328dff06f27630d5d0813349b2327e9
SHA256

759633a5a723db013fa208423f30620437e99a213be289201e757f0236d23f45
SHA512

37884e815ba674d779ffdb71dd0b81b881319d265ba2692ded2bda5bf5b6127725509ad475d5d5be07e7ce69229f9394eafe8e3aa90837f9d6ba1fb50ffdb23f
SSDEEP

1536:Zq0WVoORsemAKw1fSa6RbA1UUCtAq2RF10OcDlExkg8F:5+fs8RMiUU+AqufcDlakgw

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  759633a5a723db013fa208423f30620437e99a213be289201e757f0236d23f45N
- Size
  
  89KB
- MD5
  
  2c2b0958c0c7cc5a6643860a63fcab40
- SHA1
  
  e6c183ddf328dff06f27630d5d0813349b2327e9
- SHA256
  
  759633a5a723db013fa208423f30620437e99a213be289201e757f0236d23f45
- SHA512
  
  37884e815ba674d779ffdb71dd0b81b881319d265ba2692ded2bda5bf5b6127725509ad475d5d5be07e7ce69229f9394eafe8e3aa90837f9d6ba1fb50ffdb23f
- SSDEEP
  
  1536:Zq0WVoORsemAKw1fSa6RbA1UUCtAq2RF10OcDlExkg8F:5+fs8RMiUU+AqufcDlakgw
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence