0fa041f7f710d9f748ca6cf1b902ff728996d10ef6496a5f5913d43d69875c2d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fa041f7f710d9f748ca6cf1b902ff728996d10ef6496a5f5913d43d69875c2dN
Size

84KB
Sample

241004-zh4ljavfnr
MD5

5fea1e6496b08ed318d319886a0b9da0
SHA1

2d16f3422257b2a0cc6b5bac1c6522c73b9e3db5
SHA256

0fa041f7f710d9f748ca6cf1b902ff728996d10ef6496a5f5913d43d69875c2d
SHA512

67206114c1e18219999d4fe667c88f737b513578dcf746fcecce5559b0b13d38c4b7cfdf23ffce089e4c0755e0d8408cee53cc41d7fe04d7efa6dd37c5028c68
SSDEEP

1536:Z/3kgEv8PjPOkHVHJmskgXSREXHfVPfMVwNKT1iqWUPGc4T7VLd:p3kx8PjP5HJmsTCREXdXNKT1ntPG9pB

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0fa041f7f710d9f748ca6cf1b902ff728996d10ef6496a5f5913d43d69875c2dN
- Size
  
  84KB
- MD5
  
  5fea1e6496b08ed318d319886a0b9da0
- SHA1
  
  2d16f3422257b2a0cc6b5bac1c6522c73b9e3db5
- SHA256
  
  0fa041f7f710d9f748ca6cf1b902ff728996d10ef6496a5f5913d43d69875c2d
- SHA512
  
  67206114c1e18219999d4fe667c88f737b513578dcf746fcecce5559b0b13d38c4b7cfdf23ffce089e4c0755e0d8408cee53cc41d7fe04d7efa6dd37c5028c68
- SSDEEP
  
  1536:Z/3kgEv8PjPOkHVHJmskgXSREXHfVPfMVwNKT1iqWUPGc4T7VLd:p3kx8PjP5HJmsTCREXdXNKT1ntPG9pB
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence