59eed13aacd345f4babea4fb2f45da7513566f5716424c580d1ff266eaaea284 | Triage

Sharing

General

Target

59eed13aacd345f4babea4fb2f45da7513566f5716424c580d1ff266eaaea284N
Size

128KB
Sample

241002-vp9zns1ekf
MD5

cccde8a63e7e8e8ac072d0356903d280
SHA1

5c2678935f7fc22ceac9e8e476fc9d3c1d5a1dd1
SHA256

59eed13aacd345f4babea4fb2f45da7513566f5716424c580d1ff266eaaea284
SHA512

dc46dafc6db37a8f48a1316d8efcb143b781434d7331e01a5cc00cff8ee6bf4e384909bc2483b83a9f9b53cd95b3016b46c9daf2961c9742665f01cdcd6e95fa
SSDEEP

1536:n9osz8lU7xmbAqLqr0Xk83h7c8wHO53q52IrFzTXMtDhGJ5taRFkIsoh+RWGHd9M:9oW8liIbAq2rcbx7cBg3q/haR5sS+vfU

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  59eed13aacd345f4babea4fb2f45da7513566f5716424c580d1ff266eaaea284N
- Size
  
  128KB
- MD5
  
  cccde8a63e7e8e8ac072d0356903d280
- SHA1
  
  5c2678935f7fc22ceac9e8e476fc9d3c1d5a1dd1
- SHA256
  
  59eed13aacd345f4babea4fb2f45da7513566f5716424c580d1ff266eaaea284
- SHA512
  
  dc46dafc6db37a8f48a1316d8efcb143b781434d7331e01a5cc00cff8ee6bf4e384909bc2483b83a9f9b53cd95b3016b46c9daf2961c9742665f01cdcd6e95fa
- SSDEEP
  
  1536:n9osz8lU7xmbAqLqr0Xk83h7c8wHO53q52IrFzTXMtDhGJ5taRFkIsoh+RWGHd9M:9oW8liIbAq2rcbx7cBg3q/haR5sS+vfU
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence