b2897a94af1ba5d38d6a6be3d0a8cffc91ad653f8936409d2d74d201e28bad22 | Triage

Sharing

General

Target

b2897a94af1ba5d38d6a6be3d0a8cffc91ad653f8936409d2d74d201e28bad22N
Size

89KB
Sample

241005-calpessgrd
MD5

7b630bad2ab0e7bd871141414a474e70
SHA1

49a5b9e8c1b44666656e57a7f2730c81706c0038
SHA256

b2897a94af1ba5d38d6a6be3d0a8cffc91ad653f8936409d2d74d201e28bad22
SHA512

47f82f9e1eb66abea132ef3248e1ba21fb83cf8b8dfefa4d9974ea2306defbd7c0f3b2fa30c546a6db0ef996b55948342066e5f1c8f163a849e32bf5d72b8117
SSDEEP

1536:TOag0dDxpDsuC8ZIQ5AkOvabMsm/H+8kmacdlExkg8Fk:T57tvouCwIeA3s2HGmacdlakgwk

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  b2897a94af1ba5d38d6a6be3d0a8cffc91ad653f8936409d2d74d201e28bad22N
- Size
  
  89KB
- MD5
  
  7b630bad2ab0e7bd871141414a474e70
- SHA1
  
  49a5b9e8c1b44666656e57a7f2730c81706c0038
- SHA256
  
  b2897a94af1ba5d38d6a6be3d0a8cffc91ad653f8936409d2d74d201e28bad22
- SHA512
  
  47f82f9e1eb66abea132ef3248e1ba21fb83cf8b8dfefa4d9974ea2306defbd7c0f3b2fa30c546a6db0ef996b55948342066e5f1c8f163a849e32bf5d72b8117
- SSDEEP
  
  1536:TOag0dDxpDsuC8ZIQ5AkOvabMsm/H+8kmacdlExkg8Fk:T57tvouCwIeA3s2HGmacdlakgwk
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence