412c914e772eedcef12e4997b80d36eb5341de846248880366d5c344b698c128 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

412c914e772eedcef12e4997b80d36eb5341de846248880366d5c344b698c128N
Size

89KB
Sample

241004-dz6xbswcmh
MD5

3528a2095aaa6c5b744f9c4837e53f50
SHA1

576af9d6b148ce59184c188a74c182bb34e1a5cd
SHA256

412c914e772eedcef12e4997b80d36eb5341de846248880366d5c344b698c128
SHA512

93b455e9603cf6b1e2c4b9c0aa05ce20fe5e6d897c69330e9af0c0947aac7f33cd7a88941b178a228d1c5530d4e924aa567ac50a03bbcf9ad5899cc230ff67fd
SSDEEP

1536:iZ9/+QnChcrNcyHx8/HZTWf9jDOQCo0YjSW1CYmc0UlExkg8Fk:iLTvrN1g9Wf9J15vmc0Ulakgwk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  412c914e772eedcef12e4997b80d36eb5341de846248880366d5c344b698c128N
- Size
  
  89KB
- MD5
  
  3528a2095aaa6c5b744f9c4837e53f50
- SHA1
  
  576af9d6b148ce59184c188a74c182bb34e1a5cd
- SHA256
  
  412c914e772eedcef12e4997b80d36eb5341de846248880366d5c344b698c128
- SHA512
  
  93b455e9603cf6b1e2c4b9c0aa05ce20fe5e6d897c69330e9af0c0947aac7f33cd7a88941b178a228d1c5530d4e924aa567ac50a03bbcf9ad5899cc230ff67fd
- SSDEEP
  
  1536:iZ9/+QnChcrNcyHx8/HZTWf9jDOQCo0YjSW1CYmc0UlExkg8Fk:iLTvrN1g9Wf9J15vmc0Ulakgwk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence