32ff0da9bd0f0543c25ad52f45df195bfb898f3009da8013d71bdee5665419dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32ff0da9bd0f0543c25ad52f45df195bfb898f3009da8013d71bdee5665419dcN
Size

470KB
Sample

241003-ahsftsvajp
MD5

9854aaa7bf4c58882895f11250873670
SHA1

ca5da1c71338c634a1230c8ab0fe866a6db37529
SHA256

32ff0da9bd0f0543c25ad52f45df195bfb898f3009da8013d71bdee5665419dc
SHA512

17f8083158c526c94097420d8af6259a774c95b604f6806be5b60400c143cc8281633a57345ddfdc0c272652cc43ee4550a178d1d9e5322ebe5b4a2873623566
SSDEEP

12288:aTQ/Qc8QVj94nLiFzN3b7CUq1u2ztB1XQKTQInqyS6Rm6TIJ3l7DurTG9c8QVj9J:aQ4

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  32ff0da9bd0f0543c25ad52f45df195bfb898f3009da8013d71bdee5665419dcN
- Size
  
  470KB
- MD5
  
  9854aaa7bf4c58882895f11250873670
- SHA1
  
  ca5da1c71338c634a1230c8ab0fe866a6db37529
- SHA256
  
  32ff0da9bd0f0543c25ad52f45df195bfb898f3009da8013d71bdee5665419dc
- SHA512
  
  17f8083158c526c94097420d8af6259a774c95b604f6806be5b60400c143cc8281633a57345ddfdc0c272652cc43ee4550a178d1d9e5322ebe5b4a2873623566
- SSDEEP
  
  12288:aTQ/Qc8QVj94nLiFzN3b7CUq1u2ztB1XQKTQInqyS6Rm6TIJ3l7DurTG9c8QVj9J:aQ4
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence