88b56fd4ea5bd61d04d2d897d11a7aa851de7a1f06e4daaaa4609554adeeceb2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

88b56fd4ea5bd61d04d2d897d11a7aa851de7a1f06e4daaaa4609554adeeceb2
Size

320KB
Sample

241005-3pms5swepn
MD5

ae8e64fb06a2320dc2e1d76b5113669a
SHA1

6a572c7ba9c5db340569fc683dbd35a537326667
SHA256

88b56fd4ea5bd61d04d2d897d11a7aa851de7a1f06e4daaaa4609554adeeceb2
SHA512

d3c7d4164637bb7f3ea477556af4524a376ee1e442ae459867091f72f172f3c5dcee8778cd1874188924d99012881dcefadb938275a2d102e138808478be9405
SSDEEP

6144:DwAVdOnsVQ///NR5fLvQ///NREQ///NR5fLYG3eujj:k09w/Nq/NZ/NcZq

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  88b56fd4ea5bd61d04d2d897d11a7aa851de7a1f06e4daaaa4609554adeeceb2
- Size
  
  320KB
- MD5
  
  ae8e64fb06a2320dc2e1d76b5113669a
- SHA1
  
  6a572c7ba9c5db340569fc683dbd35a537326667
- SHA256
  
  88b56fd4ea5bd61d04d2d897d11a7aa851de7a1f06e4daaaa4609554adeeceb2
- SHA512
  
  d3c7d4164637bb7f3ea477556af4524a376ee1e442ae459867091f72f172f3c5dcee8778cd1874188924d99012881dcefadb938275a2d102e138808478be9405
- SSDEEP
  
  6144:DwAVdOnsVQ///NR5fLvQ///NREQ///NR5fLYG3eujj:k09w/Nq/NZ/NcZq
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence