7ff811c245b5bac8b715eeef09b751b7e8050c1e713bed9b36d5bf56d188c45e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7ff811c245b5bac8b715eeef09b751b7e8050c1e713bed9b36d5bf56d188c45eN
Size

93KB
Sample

241004-zlbd6avgnq
MD5

4a5fc03f22475e03928f4e83dec31170
SHA1

bbdcabe39dafbdc9bf2a5229c90dae9d6f9cfcd7
SHA256

7ff811c245b5bac8b715eeef09b751b7e8050c1e713bed9b36d5bf56d188c45e
SHA512

eb72bf45457a189d00946b34b384f23b8dd9948ee918d059eab5bd08b597ea28ee5cc9fd9e50439e5fb54f2f4bcabec0a92e5253bb3b679b9a5a1138fd61dfca
SSDEEP

1536:v9IhEwg/63Db17ofBOFK6T1YV/NOrQ4YsRQRRkRLJzeLD9N0iQGRNQR8RyV+32rR:vihEwdR7sh6RbneRSJdEN0s4WE+3K

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7ff811c245b5bac8b715eeef09b751b7e8050c1e713bed9b36d5bf56d188c45eN
- Size
  
  93KB
- MD5
  
  4a5fc03f22475e03928f4e83dec31170
- SHA1
  
  bbdcabe39dafbdc9bf2a5229c90dae9d6f9cfcd7
- SHA256
  
  7ff811c245b5bac8b715eeef09b751b7e8050c1e713bed9b36d5bf56d188c45e
- SHA512
  
  eb72bf45457a189d00946b34b384f23b8dd9948ee918d059eab5bd08b597ea28ee5cc9fd9e50439e5fb54f2f4bcabec0a92e5253bb3b679b9a5a1138fd61dfca
- SSDEEP
  
  1536:v9IhEwg/63Db17ofBOFK6T1YV/NOrQ4YsRQRRkRLJzeLD9N0iQGRNQR8RyV+32rR:vihEwdR7sh6RbneRSJdEN0s4WE+3K
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence