a1457a2305846e89e0c45cbe2a5770119797daa52697245b2b315f5379adf174 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1457a2305846e89e0c45cbe2a5770119797daa52697245b2b315f5379adf174N
Size

73KB
Sample

241002-yz9y7svarq
MD5

3fc90c5a49316c919d805dbb80c7c830
SHA1

0c170912c994558dc1898ea730e13022231dbca0
SHA256

a1457a2305846e89e0c45cbe2a5770119797daa52697245b2b315f5379adf174
SHA512

192c4e863decc7ab4d3246aae739573c07d9868f29df217eec4618bb46bb42c382ba0fd3a1f516f2c90304dcdeecabe2a596b7dd4f5ae019a5c860d1fb521ddb
SSDEEP

1536:uOWnJ86yJWPiGVdcHtfeW+Qpsr5YMkhohBM:In7e7Ah5NUAM

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  a1457a2305846e89e0c45cbe2a5770119797daa52697245b2b315f5379adf174N
- Size
  
  73KB
- MD5
  
  3fc90c5a49316c919d805dbb80c7c830
- SHA1
  
  0c170912c994558dc1898ea730e13022231dbca0
- SHA256
  
  a1457a2305846e89e0c45cbe2a5770119797daa52697245b2b315f5379adf174
- SHA512
  
  192c4e863decc7ab4d3246aae739573c07d9868f29df217eec4618bb46bb42c382ba0fd3a1f516f2c90304dcdeecabe2a596b7dd4f5ae019a5c860d1fb521ddb
- SSDEEP
  
  1536:uOWnJ86yJWPiGVdcHtfeW+Qpsr5YMkhohBM:In7e7Ah5NUAM
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence