e5782d109b308f7e6b47b6226715f12092dfa85b425624e76d8fe248afdf3537 | Triage

Sharing

General

Target

e5782d109b308f7e6b47b6226715f12092dfa85b425624e76d8fe248afdf3537N
Size

96KB
Sample

241004-hc8vmazaql
MD5

73cbc6ffce252e994ab0a9c74e5b5750
SHA1

5ee80afa6448d9e0a515f09d6a68c0797f858c44
SHA256

e5782d109b308f7e6b47b6226715f12092dfa85b425624e76d8fe248afdf3537
SHA512

50495954d98e9d832a4558f52809f36e62573a11aacd0d38aa1f646efa198b12e0795accea63bbf14f62ef677408ba6c443a359397ca085143926e483797056d
SSDEEP

1536:DgqGxxM4inTwBDBbXDZm+MU1ErUZR3vPf5fEIT4aanzsRQTRkRLJzeLD9N0iQGRo:d6xmT+BzDX3Xf58ITUYeTSJdEN0s4WEx

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e5782d109b308f7e6b47b6226715f12092dfa85b425624e76d8fe248afdf3537N
- Size
  
  96KB
- MD5
  
  73cbc6ffce252e994ab0a9c74e5b5750
- SHA1
  
  5ee80afa6448d9e0a515f09d6a68c0797f858c44
- SHA256
  
  e5782d109b308f7e6b47b6226715f12092dfa85b425624e76d8fe248afdf3537
- SHA512
  
  50495954d98e9d832a4558f52809f36e62573a11aacd0d38aa1f646efa198b12e0795accea63bbf14f62ef677408ba6c443a359397ca085143926e483797056d
- SSDEEP
  
  1536:DgqGxxM4inTwBDBbXDZm+MU1ErUZR3vPf5fEIT4aanzsRQTRkRLJzeLD9N0iQGRo:d6xmT+BzDX3Xf58ITUYeTSJdEN0s4WEx
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence